D217: in-memory CA handoff on update/restart; deploys stop locking the CA #154

New issue

Open

opened 2026-10-10 10:40:47 +00:00 by kayg · 242 comments

kayg commented 2026-10-10 10:40:47 +00:00

Owner

Copy link

D217 (owner, 2026-10-10): updates and deploys must hand the unlocked CA key to the new server process in memory, as D168 always said. A plain stop/start counts as a cold start and locks the CA, and the orchestrator's deploy script did exactly that on every deploy today.

Scope: the server's in-place update/restart path, a local authenticated handoff channel, the deploy procedure, and tests.

D217 (owner, 2026-10-10): updates and deploys must hand the unlocked CA key to the new server process in memory, as D168 always said. A plain stop/start counts as a cold start and locks the CA, and the orchestrator's deploy script did exactly that on every deploy today. Scope: the server's in-place update/restart path, a local authenticated handoff channel, the deploy procedure, and tests.

kayg commented 2026-10-10 13:29:01 +00:00

Author

Owner

Copy link

Starting #154 on ca-handoff, base 068574588f (release-prod-2). Read CLAUDE.md, DECISIONS.md, architecture/process and D168/D217 from origin/dev. #154 has no comments or linked parent. Existing ca_memory.rs handoff is process-only; remote_startup.rs always constructs a cold-locked source. Will implement authenticated inherited-socketpair exec restart, local-owner restart control, reload integration, parser/process tests and deployment procedure. No deployment.

Starting #154 on ca-handoff, base 068574588f8c2cbe44262d8be9f59b740ffb42a4 (release-prod-2). Read CLAUDE.md, DECISIONS.md, architecture/process and D168/D217 from origin/dev. #154 has no comments or linked parent. Existing ca_memory.rs handoff is process-only; remote_startup.rs always constructs a cold-locked source. Will implement authenticated inherited-socketpair exec restart, local-owner restart control, reload integration, parser/process tests and deployment procedure. No deployment.

kayg commented 2026-10-10 13:30:30 +00:00

Author

Owner

Copy link

Design/contract proposal (D168/D217): bounded v1 frame (magic, issuer DER length, 32-byte Ed25519 seed, issuer DER) transferred on an anonymous Unix socketpair inherited as stdin exclusively by exec. No token, named key socket, secret arguments/environment, or new dependency. The receiver checks SO_PEERCRED UID and PID against its own identity (PID survives exec), validates the frame and retained issuer/key before unlock, and otherwise continues cold-locked. Successful exec erases the old address space even before receiver validation, stronger than retaining old signing material until acknowledgement; failed exec terminates without externalizing material. Serialized seed/frame buffers are zeroized. The separate restart-request socket carries only a binary pathname, restricted to the service UID in a 0700 directory/0600 socket. SIGHUP requests the same exec path with current binary. This is an additive local control contract, not a public network protocol change.

Design/contract proposal (D168/D217): bounded v1 frame (magic, issuer DER length, 32-byte Ed25519 seed, issuer DER) transferred on an anonymous Unix socketpair inherited as stdin exclusively by exec. No token, named key socket, secret arguments/environment, or new dependency. The receiver checks SO_PEERCRED UID and PID against its own identity (PID survives exec), validates the frame and retained issuer/key before unlock, and otherwise continues cold-locked. Successful exec erases the old address space even before receiver validation, stronger than retaining old signing material until acknowledgement; failed exec terminates without externalizing material. Serialized seed/frame buffers are zeroized. The separate restart-request socket carries only a binary pathname, restricted to the service UID in a 0700 directory/0600 socket. SIGHUP requests the same exec path with current binary. This is an additive local control contract, not a public network protocol change.

kayg commented 2026-10-10 13:40:18 +00:00

Author

Owner

Copy link

Security finding: std::io::Stdin uses a global buffered reader, which could retain an unzeroized copy of the signing seed after a bounded handoff read. ca_handoff.rs uses direct nix::unistd::read into Zeroizing storage instead, replaces stdin with /dev/null before child startup, and requires canonical exact issuer DER (OpenSSL can accept a DER prefix). Bounds: 32-byte seed, 2048-byte issuer maximum, 2090-byte frame maximum, 2-second socket deadline, one channel per restart rather than one per session/node. Host load during initial builds: 24.92/24.85/18.38 on 8 cores; no load generators started.

Security finding: std::io::Stdin uses a global buffered reader, which could retain an unzeroized copy of the signing seed after a bounded handoff read. ca_handoff.rs uses direct nix::unistd::read into Zeroizing storage instead, replaces stdin with /dev/null before child startup, and requires canonical exact issuer DER (OpenSSL can accept a DER prefix). Bounds: 32-byte seed, 2048-byte issuer maximum, 2090-byte frame maximum, 2-second socket deadline, one channel per restart rather than one per session/node. Host load during initial builds: 24.92/24.85/18.38 on 8 cores; no load generators started.

kayg commented 2026-10-10 13:49:07 +00:00

Author

Owner

Copy link

Initial gate found a fixture prerequisite, not a product regression: verify-agent-attach-credit.py creates target/ac without creating target itself, and this fresh worktree had no target directory (FileNotFoundError at script line 17). Created an ignored target symlink to this job's scratch target directory, keeping build/test output off /tmp and out of tracked files. Clippy's new module doc-markdown error was corrected; dedicated workspace clippy now passes. Full gate rerun will validate both corrections.

Initial gate found a fixture prerequisite, not a product regression: verify-agent-attach-credit.py creates target/ac<PID> without creating target itself, and this fresh worktree had no target directory (FileNotFoundError at script line 17). Created an ignored target symlink to this job's scratch target directory, keeping build/test output off /tmp and out of tracked files. Clippy's new module doc-markdown error was corrected; dedicated workspace clippy now passes. Full gate rerun will validate both corrections.

kayg commented 2026-10-10 13:53:47 +00:00

Author

Owner

Copy link

Correction to fixture setup note: target/ is an empty ignored fixture directory, not a symlink (the repository ignores target/ directories but would track a target symlink). CARGO_TARGET_DIR remains /home/kayg/.cache/codex-scratch/ca-handoff/target for every Rust build. No build targets are in the worktree or /tmp.

Correction to fixture setup note: target/ is an empty ignored fixture directory, not a symlink (the repository ignores target/ directories but would track a target symlink). CARGO_TARGET_DIR remains /home/kayg/.cache/codex-scratch/ca-handoff/target for every Rust build. No build targets are in the worktree or /tmp.

kayg commented 2026-10-10 14:09:09 +00:00

Author

Owner

Copy link

Handoff module tests: 3 passed, 0 failed, including the real socketpair signer roundtrip, cold-start lock, every frame truncation and every-byte mutation, and 4097 deterministic malformed inputs. Corrected terminal fixture test: Attach without Credit: no Output/Snapshot for 350 ms; control responsive; funded replay 149 bytes in 664.5 ms: PASS. Transfer disables process dumpability before exporting/importing the seed; successful exec replaces all old key references. Initial unscoped network self-tests failed under shared host scheduling (321.68/379.39 ms and 420.98/932.98 ms p50/p99 for nominal 300±30 ms); CPUWeight=10000 scope self-test passes unchanged at 311.85/315.85 ms. Full gate rerun is in progress.

Handoff module tests: 3 passed, 0 failed, including the real socketpair signer roundtrip, cold-start lock, every frame truncation and every-byte mutation, and 4097 deterministic malformed inputs. Corrected terminal fixture test: Attach without Credit: no Output/Snapshot for 350 ms; control responsive; funded replay 149 bytes in 664.5 ms: PASS. Transfer disables process dumpability before exporting/importing the seed; successful exec replaces all old key references. Initial unscoped network self-tests failed under shared host scheduling (321.68/379.39 ms and 420.98/932.98 ms p50/p99 for nominal 300±30 ms); CPUWeight=10000 scope self-test passes unchanged at 311.85/315.85 ms. Full gate rerun is in progress.

kayg referenced this issue from a commit 2026-10-10 14:23:02 +00:00

feat(remote): add bounded same-PID CA handoff (D217)

kayg commented 2026-10-10 14:24:42 +00:00

Author

Owner

Copy link

Completed CA handoff module: 5564516981, pushed ca-handoff. Real socketpair/property tests: 3 passed, 0 failed; maximum frame 2090 bytes, one per server. x86 static: 19,896,992 bytes; size ceiling is the only remaining fast-gate failure (D205). Supplemental TS gate passes (36 protocol tests, 0 failures); full logs will also be committed as final evidence.

Verbatim scripts/verify fast output:

Running as unit: run-p410595-i38119431.scope; invocation ID: 46058ad83dee47cb9ed7ad4d77391d0b
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.85 p99_ms=315.85 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Blocking waiting for file lock on build directory
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 9m 07s

==> test
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on build directory
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 32s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 17 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.68s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.36s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.02s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test real_shell_reconnect_resize_and_retained_exit ... ok
test user_scope_survives_parent_unit_stop ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.41s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.79s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.17s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 8.38s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test directional_grants_union_and_minimal_updates ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.36s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::registry_routes_only_declared_actions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.37s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 300 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 264.81s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::every_frozen_message ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 60.68s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.68s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 00s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19896992 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19896992 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed CA handoff module: 5564516981aa523f0908306e4193c56ab969d941, pushed ca-handoff. Real socketpair/property tests: 3 passed, 0 failed; maximum frame 2090 bytes, one per server. x86 static: 19,896,992 bytes; size ceiling is the only remaining fast-gate failure (D205). Supplemental TS gate passes (36 protocol tests, 0 failures); full logs will also be committed as final evidence. Verbatim scripts/verify fast output: ```text Running as unit: run-p410595-i38119431.scope; invocation ID: 46058ad83dee47cb9ed7ad4d77391d0b METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.85 p99_ms=315.85 result=PASS ==> fmt ==> VT native fmt ==> clippy Blocking waiting for file lock on build directory Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 9m 07s ==> test Blocking waiting for file lock on package cache Blocking waiting for file lock on build directory Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 32s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 17 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.68s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.36s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.02s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test real_shell_reconnect_resize_and_retained_exit ... ok test user_scope_survives_parent_unit_stop ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.41s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.79s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.17s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 8.38s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test overlaps_are_reported_without_silent_range_changes ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test directional_grants_union_and_minimal_updates ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.36s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::registry_routes_only_declared_actions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.37s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 300 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 264.81s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::every_frozen_message ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test frame::checks::tests::golden_and_fragmented ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 60.68s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.68s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 00s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19896992 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19896992 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 14:37:06 +00:00

Author

Owner

Copy link

Registry gate caught a new action declaration error before commit: PluginDescriptor::validate requires action IDs to start with their plugin ID. The proposed server.restart ID invalidated the remote descriptor, causing 13 configuration tests to fail with InvalidConfiguration (e.g. auth/tests.rs:1274 and remote_startup_tests.rs:73). Corrected to remote.server.restart; the CLI spelling remains infraternal server restart. No contract or validator relaxation. Full gate rerun follows.

Registry gate caught a new action declaration error before commit: PluginDescriptor::validate requires action IDs to start with their plugin ID. The proposed server.restart ID invalidated the remote descriptor, causing 13 configuration tests to fail with InvalidConfiguration (e.g. auth/tests.rs:1274 and remote_startup_tests.rs:73). Corrected to remote.server.restart; the CLI spelling remains infraternal server restart. No contract or validator relaxation. Full gate rerun follows.

kayg commented 2026-10-10 14:43:47 +00:00

Author

Owner

Copy link

Restart path hardening (before runtime wiring): an owner-authenticated request alone is insufficient if another local user can replace the selected pathname. The exec adapter will reject symlinks, set-ID executables, group/world-writable files/directories and ownership outside the service UID or root, checking the original path before canonicalization and checking again on the server. This prevents an untrusted symlink from redirecting to even a root-owned program that prints stdin. SIGHUP applies the same executable checks. Staging remains beside the existing trusted binary, as the deployment brief requires.

Restart path hardening (before runtime wiring): an owner-authenticated request alone is insufficient if another local user can replace the selected pathname. The exec adapter will reject symlinks, set-ID executables, group/world-writable files/directories and ownership outside the service UID or root, checking the original path before canonicalization and checking again on the server. This prevents an untrusted symlink from redirecting to even a root-owned program that prints stdin. SIGHUP applies the same executable checks. Staging remains beside the existing trusted binary, as the deployment brief requires.

kayg commented 2026-10-10 14:52:54 +00:00

Author

Owner

Copy link

Production-line baseline measured from an archived, unchanged 068574588f checkout with the pinned 1.99.0 Rust / 0.15.2 Zig static release profile: x86_64 19,896,992 bytes; aarch64 17,729,832 bytes; both stripped static PIE. First handoff-module commit 55645169 x86_64 is also 19,896,992 bytes (0-byte size delta; IPC is not wired yet). Thus the old fast-gate size ceiling already fails on the production base, independently of #154. No new dependencies; final live-path deltas will be measured against these binaries.

Production-line baseline measured from an archived, unchanged 068574588f8c2cbe44262d8be9f59b740ffb42a4 checkout with the pinned 1.99.0 Rust / 0.15.2 Zig static release profile: x86_64 19,896,992 bytes; aarch64 17,729,832 bytes; both stripped static PIE. First handoff-module commit 55645169 x86_64 is also 19,896,992 bytes (0-byte size delta; IPC is not wired yet). Thus the old fast-gate size ceiling already fails on the production base, independently of #154. No new dependencies; final live-path deltas will be measured against these binaries.

kayg commented 2026-10-10 14:56:48 +00:00

Author

Owner

Copy link

Compatibility choice before CLI wiring: server startup attempts import only through authenticated stdin (kernel UID/PID first, before any read), then replaces stdin with /dev/null. No private handoff argv flag is needed. This avoids rejecting an older executable on rollback merely because it lacks that flag; a compatible normal server that lacks import stays cold-locked, per D168. Warm continuity requires a running predecessor with restart/handoff support; the first rollout from a pre-#154 binary cannot retroactively add its missing IPC endpoint. No deploy is performed in this job.

Compatibility choice before CLI wiring: server startup attempts import only through authenticated stdin (kernel UID/PID first, before any read), then replaces stdin with /dev/null. No private handoff argv flag is needed. This avoids rejecting an older executable on rollback merely because it lacks that flag; a compatible normal server that lacks import stays cold-locked, per D168. Warm continuity requires a running predecessor with restart/handoff support; the first rollout from a pre-#154 binary cannot retroactively add its missing IPC endpoint. No deploy is performed in this job.

kayg referenced this issue from a commit 2026-10-10 14:59:38 +00:00

feat(remote): declare the server restart action (D202, D217)

kayg commented 2026-10-10 15:01:33 +00:00

Author

Owner

Copy link

Completed shared restart action: de5621cf8a, pushed ca-handoff. Correct remote.server.restart namespace; CLI help and skills share its D202 instructions. x86 static 19,897,280 bytes (+288 bytes over measured production base); no new dependency or runtime task. Supplemental TS checks pass.

Verbatim scripts/verify fast output:

Running as unit: run-p666473-i38375281.scope; invocation ID: ed9a611145fc4ebf866d7c41f96f3252
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=310.37 p99_ms=327.88 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 13.70s

==> test
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 32.62s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 17 tests
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.23s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.69s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.28s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.55s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.07s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.86s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.24s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.71s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.26s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 300 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok

test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 250.64s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::tests::golden_and_fragmented ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 62.62s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Blocking waiting for file lock on build directory
   Compiling cfg-if v1.0.5
   Compiling pin-project-lite v0.2.17
   Compiling libc v0.2.190
   Compiling bytes v1.12.1
   Compiling serde_core v1.0.229
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling futures-core v0.3.34
   Compiling tracing-core v0.1.36
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling subtle v2.6.1
   Compiling slab v0.4.12
   Compiling yoke v0.8.3
   Compiling tracing v0.1.44
   Compiling typenum v1.20.1
   Compiling writeable v0.6.4
   Compiling serde v1.0.229
   Compiling litemap v0.8.3
   Compiling utf8_iter v1.0.4
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling num-traits v0.2.19
   Compiling equivalent v1.0.2
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling mio v1.2.4
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling percent-encoding v2.3.2
   Compiling generic-array v0.14.7
   Compiling signal-hook-registry v1.4.8
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling thiserror v2.0.21
   Compiling icu_collections v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling cpufeatures v0.2.17
   Compiling tokio v1.53.2
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling scopeguard v1.2.0
   Compiling icu_provider v2.3.1
   Compiling zerocopy v0.8.60
   Compiling digest v0.10.7
   Compiling openssl-sys v0.9.117
   Compiling futures-util v0.3.34
   Compiling lock_api v0.4.14
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling getrandom v0.2.17
   Compiling indexmap v2.14.2
   Compiling bitflags v2.13.2
   Compiling rand_core v0.10.1
   Compiling idna_adapter v1.2.2
   Compiling zmij v1.0.23
   Compiling futures-channel v0.3.34
   Compiling parking_lot_core v0.9.12
   Compiling idna v1.1.0
   Compiling http v1.5.0
   Compiling allocator-api2 v0.2.21
   Compiling serde_json v1.0.151
   Compiling foldhash v0.1.5
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling crossbeam-utils v0.8.23
   Compiling hashbrown v0.15.5
   Compiling getrandom v0.4.3
   Compiling either v1.18.0
   Compiling base64 v0.22.1
   Compiling ryu v1.0.23
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling hashlink v0.10.0
   Compiling crossbeam-queue v0.3.14
   Compiling event-listener v5.4.2
   Compiling serde_urlencoded v0.7.1
   Compiling crc v3.4.0
   Compiling futures-intrusive v0.5.0
   Compiling ppv-lite86 v0.2.21
   Compiling tokio-stream v0.1.19
   Compiling spin v0.9.9
   Compiling sha2 v0.10.9
   Compiling libsqlite3-sys v0.30.1
   Compiling foreign-types-shared v0.1.1
   Compiling flume v0.11.1
   Compiling ring v0.17.14
   Compiling getrandom v0.3.4
   Compiling foreign-types v0.3.2
   Compiling sqlx-core v0.8.6
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling zeroize v1.9.0
   Compiling minimal-lexical v0.2.1
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling arrayvec v0.7.8
   Compiling nom v7.1.3
   Compiling powerfmt v0.2.1
   Compiling time-core v0.1.9
   Compiling untrusted v0.9.0
   Compiling num-conv v0.2.2
   Compiling deranged v0.5.8
   Compiling rand_chacha v0.9.0
   Compiling thiserror v1.0.69
   Compiling rustls-pki-types v1.15.1
   Compiling memoffset v0.9.1
   Compiling sqlx-sqlite v0.8.6
   Compiling httparse v1.10.1
   Compiling rusticata-macros v4.1.0
   Compiling tokio-util v0.7.19
   Compiling cpufeatures v0.3.1
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling time v0.3.55
   Compiling sqlx v0.8.6
   Compiling tinyvec v1.13.3
   Compiling chacha20 v0.10.2
   Compiling nix v0.30.1
   Compiling rand v0.9.5
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-plugin-api)
   Compiling uuid v1.27.0
   Compiling rand_core v0.6.4
   Compiling rustls v0.23.45
   Compiling num-integer v0.1.47
   Compiling base64 v0.21.7
   Compiling fnv v1.0.7
   Compiling lazy_static v1.5.1
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling atomic-waker v1.1.2
   Compiling base64urlsafedata v0.5.5
   Compiling asn1-rs v0.6.2
   Compiling rustls-webpki v0.103.15
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling rand v0.10.3
   Compiling h2 v0.4.19
   Compiling rand_pcg v0.10.2
   Compiling rustc-hash v2.1.3
   Compiling tower-layer v0.3.3
   Compiling lru-slab v0.1.3
   Compiling mime v0.3.17
   Compiling der-parser v9.0.0
   Compiling oid-registry v0.7.1
   Compiling quinn-udp v0.5.16
   Compiling vte v0.15.0
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling utf8parse v0.2.2
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol)
   Compiling regex-syntax v0.8.11
   Compiling sync_wrapper v1.0.2
   Compiling anstyle-parse v1.0.0
   Compiling serde_cbor_2 v0.13.0
   Compiling tungstenite v0.29.0
   Compiling quinn-proto v0.11.19
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling x509-parser v0.16.0
   Compiling hyper v1.11.1
   Compiling webauthn-rs-proto v0.5.5
   Compiling regex-automata v0.4.18
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling is_terminal_polyfill v1.70.2
   Compiling colorchoice v1.0.5
   Compiling hyper-util v0.1.21
   Compiling anstyle v1.0.14
   Compiling hex v0.4.3
   Compiling anstyle-query v1.1.5
   Compiling base64ct v1.8.3
   Compiling unicase v2.10.0
   Compiling matchers v0.2.0
   Compiling anstream v1.0.0
   Compiling bitcoin_hashes v0.14.101
   Compiling quinn v0.11.12
   Compiling rand v0.8.8
   Compiling mime_guess v2.0.5
   Compiling tokio-tungstenite v0.29.0
   Compiling password-hash v0.5.0
   Compiling arc-swap v1.9.2
   Compiling fs-err v3.3.2
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts)
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-mesh)
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling matchit v0.8.4
   Compiling clap_lex v1.1.1
   Compiling strsim v0.11.1
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh)
   Compiling argon2 v0.5.3
   Compiling axum v0.8.9
   Compiling clap_builder v4.6.7
   Compiling tracing-subscriber v0.3.23
   Compiling bip39 v2.2.2
   Compiling tower-http v0.6.11
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/ssh)
   Compiling clap v4.6.7
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling axum-server v0.8.0
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 7m 55s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19897280 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19897280 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed shared restart action: de5621cf8a3f4e4560860a4a768becd6b8cb18c6, pushed ca-handoff. Correct remote.server.restart namespace; CLI help and skills share its D202 instructions. x86 static 19,897,280 bytes (+288 bytes over measured production base); no new dependency or runtime task. Supplemental TS checks pass. Verbatim scripts/verify fast output: ```text Running as unit: run-p666473-i38375281.scope; invocation ID: ed9a611145fc4ebf866d7c41f96f3252 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=310.37 p99_ms=327.88 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 13.70s ==> test Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 32.62s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 17 tests test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.23s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.69s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.28s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok test real_shell_reconnect_resize_and_retained_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.55s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.07s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.86s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.24s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test directional_grants_union_and_minimal_updates ... ok test overlaps_are_reported_without_silent_range_changes ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.71s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_routes_only_declared_actions ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test refused_previous_service_stop_only_removes_staging ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.26s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 300 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 250.64s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::tests::golden_and_fragmented ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 62.62s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Blocking waiting for file lock on build directory Compiling cfg-if v1.0.5 Compiling pin-project-lite v0.2.17 Compiling libc v0.2.190 Compiling bytes v1.12.1 Compiling serde_core v1.0.229 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling futures-core v0.3.34 Compiling tracing-core v0.1.36 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling subtle v2.6.1 Compiling slab v0.4.12 Compiling yoke v0.8.3 Compiling tracing v0.1.44 Compiling typenum v1.20.1 Compiling writeable v0.6.4 Compiling serde v1.0.229 Compiling litemap v0.8.3 Compiling utf8_iter v1.0.4 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling num-traits v0.2.19 Compiling equivalent v1.0.2 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling mio v1.2.4 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling percent-encoding v2.3.2 Compiling generic-array v0.14.7 Compiling signal-hook-registry v1.4.8 Compiling icu_normalizer_data v2.3.0 Compiling icu_properties_data v2.3.0 Compiling icu_locale_core v2.3.0 Compiling thiserror v2.0.21 Compiling icu_collections v2.3.0 Compiling form_urlencoded v1.2.2 Compiling cpufeatures v0.2.17 Compiling tokio v1.53.2 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling scopeguard v1.2.0 Compiling icu_provider v2.3.1 Compiling zerocopy v0.8.60 Compiling digest v0.10.7 Compiling openssl-sys v0.9.117 Compiling futures-util v0.3.34 Compiling lock_api v0.4.14 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling getrandom v0.2.17 Compiling indexmap v2.14.2 Compiling bitflags v2.13.2 Compiling rand_core v0.10.1 Compiling idna_adapter v1.2.2 Compiling zmij v1.0.23 Compiling futures-channel v0.3.34 Compiling parking_lot_core v0.9.12 Compiling idna v1.1.0 Compiling http v1.5.0 Compiling allocator-api2 v0.2.21 Compiling serde_json v1.0.151 Compiling foldhash v0.1.5 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling crossbeam-utils v0.8.23 Compiling hashbrown v0.15.5 Compiling getrandom v0.4.3 Compiling either v1.18.0 Compiling base64 v0.22.1 Compiling ryu v1.0.23 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling hashlink v0.10.0 Compiling crossbeam-queue v0.3.14 Compiling event-listener v5.4.2 Compiling serde_urlencoded v0.7.1 Compiling crc v3.4.0 Compiling futures-intrusive v0.5.0 Compiling ppv-lite86 v0.2.21 Compiling tokio-stream v0.1.19 Compiling spin v0.9.9 Compiling sha2 v0.10.9 Compiling libsqlite3-sys v0.30.1 Compiling foreign-types-shared v0.1.1 Compiling flume v0.11.1 Compiling ring v0.17.14 Compiling getrandom v0.3.4 Compiling foreign-types v0.3.2 Compiling sqlx-core v0.8.6 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling zeroize v1.9.0 Compiling minimal-lexical v0.2.1 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling arrayvec v0.7.8 Compiling nom v7.1.3 Compiling powerfmt v0.2.1 Compiling time-core v0.1.9 Compiling untrusted v0.9.0 Compiling num-conv v0.2.2 Compiling deranged v0.5.8 Compiling rand_chacha v0.9.0 Compiling thiserror v1.0.69 Compiling rustls-pki-types v1.15.1 Compiling memoffset v0.9.1 Compiling sqlx-sqlite v0.8.6 Compiling httparse v1.10.1 Compiling rusticata-macros v4.1.0 Compiling tokio-util v0.7.19 Compiling cpufeatures v0.3.1 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling time v0.3.55 Compiling sqlx v0.8.6 Compiling tinyvec v1.13.3 Compiling chacha20 v0.10.2 Compiling nix v0.30.1 Compiling rand v0.9.5 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-plugin-api) Compiling uuid v1.27.0 Compiling rand_core v0.6.4 Compiling rustls v0.23.45 Compiling num-integer v0.1.47 Compiling base64 v0.21.7 Compiling fnv v1.0.7 Compiling lazy_static v1.5.1 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling atomic-waker v1.1.2 Compiling base64urlsafedata v0.5.5 Compiling asn1-rs v0.6.2 Compiling rustls-webpki v0.103.15 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling rand v0.10.3 Compiling h2 v0.4.19 Compiling rand_pcg v0.10.2 Compiling rustc-hash v2.1.3 Compiling tower-layer v0.3.3 Compiling lru-slab v0.1.3 Compiling mime v0.3.17 Compiling der-parser v9.0.0 Compiling oid-registry v0.7.1 Compiling quinn-udp v0.5.16 Compiling vte v0.15.0 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling utf8parse v0.2.2 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol) Compiling regex-syntax v0.8.11 Compiling sync_wrapper v1.0.2 Compiling anstyle-parse v1.0.0 Compiling serde_cbor_2 v0.13.0 Compiling tungstenite v0.29.0 Compiling quinn-proto v0.11.19 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling x509-parser v0.16.0 Compiling hyper v1.11.1 Compiling webauthn-rs-proto v0.5.5 Compiling regex-automata v0.4.18 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling is_terminal_polyfill v1.70.2 Compiling colorchoice v1.0.5 Compiling hyper-util v0.1.21 Compiling anstyle v1.0.14 Compiling hex v0.4.3 Compiling anstyle-query v1.1.5 Compiling base64ct v1.8.3 Compiling unicase v2.10.0 Compiling matchers v0.2.0 Compiling anstream v1.0.0 Compiling bitcoin_hashes v0.14.101 Compiling quinn v0.11.12 Compiling rand v0.8.8 Compiling mime_guess v2.0.5 Compiling tokio-tungstenite v0.29.0 Compiling password-hash v0.5.0 Compiling arc-swap v1.9.2 Compiling fs-err v3.3.2 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts) Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-mesh) Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling matchit v0.8.4 Compiling clap_lex v1.1.1 Compiling strsim v0.11.1 Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh) Compiling argon2 v0.5.3 Compiling axum v0.8.9 Compiling clap_builder v4.6.7 Compiling tracing-subscriber v0.3.23 Compiling bip39 v2.2.2 Compiling tower-http v0.6.11 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/ssh) Compiling clap v4.6.7 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling axum-server v0.8.0 Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 7m 55s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19897280 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19897280 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 15:30:28 +00:00

feat(cli): exec server replacements with warm CA state (D217)

kayg commented 2026-10-10 15:30:56 +00:00

Author

Owner

Copy link

Completed lifecycle wiring: 77785aa7, pushed ca-handoff. CLI restart, --binary, same-PID exec and SIGHUP reload; private control endpoint; verified binary paths; failed import remains cold-locked. Help and absent-service --json checked against real CLI. x86 stripped static 19,938,848 bytes (+41,856 vs unchanged production base 19,896,992); no new dependencies. All non-size fast rows PASS, legacy size-only failure accepted under D205. Supplemental TS gate passed in the previous step; TS unchanged.

Verbatim scripts/verify fast:

Running as unit: run-p939691-i38648473.scope; invocation ID: bfbb822c79b24c04a3c69d79afcbf3b2
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.98 p99_ms=307.85 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.42s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 12.29s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 17 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.54s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.32s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.19s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.26s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.46s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.55s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.82s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.28s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test names_versions_and_backend_status ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.13s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.27s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_socket_refuses_an_unrelated_same_user_process ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.24s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 300 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 313.91s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.89s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::golden::every_frozen_message ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test frame::checks::tests::golden_and_fragmented ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 77.10s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 18s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19938848 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19938848 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed lifecycle wiring: 77785aa7, pushed ca-handoff. CLI restart, --binary, same-PID exec and SIGHUP reload; private control endpoint; verified binary paths; failed import remains cold-locked. Help and absent-service --json checked against real CLI. x86 stripped static 19,938,848 bytes (+41,856 vs unchanged production base 19,896,992); no new dependencies. All non-size fast rows PASS, legacy size-only failure accepted under D205. Supplemental TS gate passed in the previous step; TS unchanged. Verbatim scripts/verify fast: ```text Running as unit: run-p939691-i38648473.scope; invocation ID: bfbb822c79b24c04a3c69d79afcbf3b2 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.98 p99_ms=307.85 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.42s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 12.29s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 17 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.54s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.32s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.19s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.26s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok test real_shell_reconnect_resize_and_retained_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.46s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.55s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.82s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test relay::tests::output_partial_credit_and_dedup ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.28s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test names_versions_and_backend_status ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.13s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test component_tests::component_declarations_cannot_create_servers ... ok test tests::registry_routes_only_declared_actions ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.27s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_socket_refuses_an_unrelated_same_user_process ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.24s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 300 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 270 passed; 0 failed; 30 ignored; 0 measured; 0 filtered out; finished in 313.91s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.89s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::golden::every_frozen_message ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test frame::checks::tests::golden_and_fragmented ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 77.10s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 18s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19938848 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19938848 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 15:41:15 +00:00

Author

Owner

Copy link

Finding: new real control test failed before the fix (test-private-ancestor-before.log, owner restart deadline 5.00s). The executable path lives under /home/kayg (0700) and .cache (0700), but owned build directories are 0775. An unconditional ancestor group-write ban rejects the running executable despite the inaccessible private ancestor. Updating path validation to walk root-to-leaf, permit directory group writes only below an owned private ancestor, and retain refusal of foreign ownership, symlinks, world-write directories, writable executable files and set-ID files. No signer export occurs before path validation.

CA handoff suite: 7 passed, 0 failed, 1 explicitly ignored shipping benchmark; includes same-PID exec, foreign PID refusal, malformed frames and abrupt receiver stop.

Failing regression output:

Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed.
Running as unit: run-p1134255-i38842934.scope; invocation ID: 72a5dfaece064932bebd73a87f00d186
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4.76s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-42bcfb59c6a96a96)

running 1 test

thread 'restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths' (1136751) panicked at crates/infraternal/src/restart_tests.rs:59:6:
owner restart request deadline: Elapsed(())
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... FAILED

failures:

failures:
    restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 19 filtered out; finished in 5.00s

error: test failed, to rerun pass `-p infraternal --bin infraternal`

Finding: new real control test failed before the fix (test-private-ancestor-before.log, owner restart deadline 5.00s). The executable path lives under /home/kayg (0700) and .cache (0700), but owned build directories are 0775. An unconditional ancestor group-write ban rejects the running executable despite the inaccessible private ancestor. Updating path validation to walk root-to-leaf, permit directory group writes only below an owned private ancestor, and retain refusal of foreign ownership, symlinks, world-write directories, writable executable files and set-ID files. No signer export occurs before path validation. CA handoff suite: 7 passed, 0 failed, 1 explicitly ignored shipping benchmark; includes same-PID exec, foreign PID refusal, malformed frames and abrupt receiver stop. Failing regression output: ```text Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed. Running as unit: run-p1134255-i38842934.scope; invocation ID: 72a5dfaece064932bebd73a87f00d186 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 4.76s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-42bcfb59c6a96a96) running 1 test thread 'restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths' (1136751) panicked at crates/infraternal/src/restart_tests.rs:59:6: owner restart request deadline: Elapsed(()) note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... FAILED failures: failures: restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 19 filtered out; finished in 5.00s error: test failed, to rerun pass `-p infraternal --bin infraternal` ```

kayg commented 2026-10-10 16:04:55 +00:00

Author

Owner

Copy link

Author security review found a lexical path escape: parent components could leave a validated private ancestor. Added a failing regression first (private_path_prefix_cannot_authorize_a_parent_directory_escape); then required rooted executable paths with no ParentDir components before validating ownership and permissions. Regression output below.

Debug shipping proof passed: 25 same-PID replacements (update/rollback/reload), CA remained unlocked; 128 real PTYs at the single-host limit retained exact shim PIDs and reattached with successful new input/output. 10000 retained host records, 50 users. p50 43.261ms, max 73.151ms; new HTTP TCP refusal bracket p50 30.955ms, max 57.493ms (configured 1ms probe). Cold and malformed shipping imports locked, non-owner restart socket access refused. Final measurements will use the stripped release build. Fixture reuses isolated shell profile and obeys odd terminal streams; setup is paced to avoid bursty DB authority reads on this shared host.

Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed.
Running as unit: run-p1300923-i39009597.scope; invocation ID: 29fb6f1e4b464303b7a0fc9819878117
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4.70s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-42bcfb59c6a96a96)

running 1 test

thread 'restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape' (1301554) panicked at crates/infraternal/src/restart_tests.rs:103:5:
assertion failed: executable(&escaped).is_err()
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... FAILED

failures:

failures:
    restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 20 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p infraternal --bin infraternal`

Author security review found a lexical path escape: parent components could leave a validated private ancestor. Added a failing regression first (private_path_prefix_cannot_authorize_a_parent_directory_escape); then required rooted executable paths with no ParentDir components before validating ownership and permissions. Regression output below. Debug shipping proof passed: 25 same-PID replacements (update/rollback/reload), CA remained unlocked; 128 real PTYs at the single-host limit retained exact shim PIDs and reattached with successful new input/output. 10000 retained host records, 50 users. p50 43.261ms, max 73.151ms; new HTTP TCP refusal bracket p50 30.955ms, max 57.493ms (configured 1ms probe). Cold and malformed shipping imports locked, non-owner restart socket access refused. Final measurements will use the stripped release build. Fixture reuses isolated shell profile and obeys odd terminal streams; setup is paced to avoid bursty DB authority reads on this shared host. ```text Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed. Running as unit: run-p1300923-i39009597.scope; invocation ID: 29fb6f1e4b464303b7a0fc9819878117 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 4.70s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-42bcfb59c6a96a96) running 1 test thread 'restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape' (1301554) panicked at crates/infraternal/src/restart_tests.rs:103:5: assertion failed: executable(&escaped).is_err() note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... FAILED failures: failures: restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 20 filtered out; finished in 0.00s error: test failed, to rerun pass `-p infraternal --bin infraternal` ```

kayg commented 2026-10-10 16:21:48 +00:00

Author

Owner

Copy link

Gate finding: the existing auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume failed with SQLite code 5 (database is locked) during concurrent recovery_start_clock, at reviewer_tests.rs:67. No recovery/SQL code changed in this lane. This is not one of the authorized #118 exceptions, so no baseline waiver is used: rerunning the complete fast gate and requiring its test row to pass. The isolated unchanged test passed in 3.10s; outputs below.

failures:

---- auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume stdout ----

thread 'auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume' (1377077) panicked at crates/infraternal-server/src/auth/reviewer_tests.rs:67:10:
called `Result::unwrap()` on an `Err` value: Storage(Database(SqliteError { code: 5, message: "database is locked" }))
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume

test result: FAILED. 273 passed; 1 failed; 31 ignored; 0 measured; 0 filtered out; finished in 310.07s

error: test failed, to rerun pass `-p infraternal-server --lib`

Running as unit: run-p1416552-i39125064.scope; invocation ID: d095a4d39b464ef28867fe3b6167495d

running 1 test
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 304 filtered out; finished in 3.10s

Gate finding: the existing auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume failed with SQLite code 5 (database is locked) during concurrent recovery_start_clock, at reviewer_tests.rs:67. No recovery/SQL code changed in this lane. This is not one of the authorized #118 exceptions, so no baseline waiver is used: rerunning the complete fast gate and requiring its test row to pass. The isolated unchanged test passed in 3.10s; outputs below. ```text failures: ---- auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume stdout ---- thread 'auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume' (1377077) panicked at crates/infraternal-server/src/auth/reviewer_tests.rs:67:10: called `Result::unwrap()` on an `Err` value: Storage(Database(SqliteError { code: 5, message: "database is locked" })) note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace failures: auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume test result: FAILED. 273 passed; 1 failed; 31 ignored; 0 measured; 0 filtered out; finished in 310.07s error: test failed, to rerun pass `-p infraternal-server --lib` ``` ```text Running as unit: run-p1416552-i39125064.scope; invocation ID: d095a4d39b464ef28867fe3b6167495d running 1 test test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 304 filtered out; finished in 3.10s ```

kayg referenced this issue from a commit 2026-10-10 16:42:26 +00:00

test(remote): prove CA restart continuity and harden executable paths (D217)

kayg commented 2026-10-10 16:43:20 +00:00

Author

Owner

Copy link

Completed verification/hardening step: 5197e376, pushed ca-handoff. Same-PID/foreign-PID real exec, partial seed import abrupt stop, cold/truncated/wrong-version cases, bounded property corpus and fuzz target; private endpoint/path regressions pass. Shipping release proof: 25 replacements including update/rollback, omitted --binary restart and SIGHUP; 128 live PTYs preserve exact shim PIDs, reattach and produce new output. 10000 retained hosts and 50 users (not claimed as live QUIC connections). CA suite 42 PASS, remote suite 49 PASS; ignored diagnostics listed in attached output.

Release metrics and machine/load, verbatim:

Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed.
Running as unit: run-p1533525-i39241741.scope; invocation ID: cc2c0d4434b24b28aac187985240414e
Linux infraternal-dev 6.12.111+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.111-1 (2026-09-28) x86_64 GNU/Linux
8
5.93 13.18 15.33 5/3006 1533529

running 1 test
METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=30.736 max_ms=39.541 refused_window_bracket_p50_ms=23.795 refused_window_bracket_max_ms=29.478 refused_samples=212 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 304 filtered out; finished in 6.58s

6.10 12.97 15.24 6/3014 1534679

Sizes: x86 19938720 bytes (+41728 vs base19986992; -128 from lifecycle commit); ARM 17769176 bytes (+39344 vs base17729832). Both stripped/static, no new dependencies. All non-size fast rows PASS; legacy size-only failure under D205. Supplemental TS checks PASS.

Verbatim scripts/verify fast:

Running as unit: run-p1473049-i39181417.scope; invocation ID: 3389343dff1f459cb502ced274efc2a7
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=307.32 p99_ms=319.67 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 7.73s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 31.27s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 21 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.97s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.76s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.97s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.06s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.80s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.08s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test directional_grants_union_and_minimal_updates ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.33s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test tests::registry_routes_only_declared_actions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.62s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 305 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok

test result: ok. 274 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 279.37s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::golden::every_frozen_message ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 43.62s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.42s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19938720 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19938720 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed verification/hardening step: 5197e376, pushed ca-handoff. Same-PID/foreign-PID real exec, partial seed import abrupt stop, cold/truncated/wrong-version cases, bounded property corpus and fuzz target; private endpoint/path regressions pass. Shipping release proof: 25 replacements including update/rollback, omitted --binary restart and SIGHUP; 128 live PTYs preserve exact shim PIDs, reattach and produce new output. 10000 retained hosts and 50 users (not claimed as live QUIC connections). CA suite 42 PASS, remote suite 49 PASS; ignored diagnostics listed in attached output. Release metrics and machine/load, verbatim: ```text Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed. Running as unit: run-p1533525-i39241741.scope; invocation ID: cc2c0d4434b24b28aac187985240414e Linux infraternal-dev 6.12.111+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.111-1 (2026-09-28) x86_64 GNU/Linux 8 5.93 13.18 15.33 5/3006 1533529 running 1 test METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=30.736 max_ms=39.541 refused_window_bracket_p50_ms=23.795 refused_window_bracket_max_ms=29.478 refused_samples=212 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 304 filtered out; finished in 6.58s 6.10 12.97 15.24 6/3014 1534679 ``` Sizes: x86 19938720 bytes (+41728 vs base19986992; -128 from lifecycle commit); ARM 17769176 bytes (+39344 vs base17729832). Both stripped/static, no new dependencies. All non-size fast rows PASS; legacy size-only failure under D205. Supplemental TS checks PASS. Verbatim scripts/verify fast: ```text Running as unit: run-p1473049-i39181417.scope; invocation ID: 3389343dff1f459cb502ced274efc2a7 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=307.32 p99_ms=319.67 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Finished `dev` profile [unoptimized + debuginfo] target(s) in 7.73s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Finished `test` profile [unoptimized + debuginfo] target(s) in 31.27s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 21 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.97s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.76s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.97s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.06s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.80s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.08s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test directional_grants_union_and_minimal_updates ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.33s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test tests::registry_routes_only_declared_actions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.62s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 305 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test result: ok. 274 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 279.37s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::golden::every_frozen_message ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::tests::golden_and_fragmented ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 43.62s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.42s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19938720 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19938720 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 16:57:10 +00:00

docs(operations): deploy and roll back through warm CA restart (D217)

kayg commented 2026-10-10 17:03:43 +00:00

Author

Owner

Copy link

Documentation step 44e2572d pushed on ca-handoff: docs/operations/deploy.md stages verified executables, invokes warm replacement, checks health plus CA state and terminal continuity, and rolls back through the same handoff; includes systemd ExecReload/KillMode snippet and initial cold compatibility transition. Author review and measured evidence summary added. Fast gate: fmt/VT fmt/clippy/test/cargo-deny PASS; legacy size-only FAIL under D205. Documentation adds zero binary bytes (x86 19938720, ARM 17769176).

Packaging finding: the repository ignores *.log. Explicitly adding the reviewed evidence transcripts in the next atomic commit so committed links resolve; the source and measurements are unchanged.

Documentation step 44e2572d pushed on ca-handoff: docs/operations/deploy.md stages verified executables, invokes warm replacement, checks health plus CA state and terminal continuity, and rolls back through the same handoff; includes systemd ExecReload/KillMode snippet and initial cold compatibility transition. Author review and measured evidence summary added. Fast gate: fmt/VT fmt/clippy/test/cargo-deny PASS; legacy size-only FAIL under D205. Documentation adds zero binary bytes (x86 19938720, ARM 17769176). Packaging finding: the repository ignores *.log. Explicitly adding the reviewed evidence transcripts in the next atomic commit so committed links resolve; the source and measurements are unchanged.

kayg referenced this issue from a commit 2026-10-10 17:07:37 +00:00

docs(evidence): attach reviewed CA handoff gate transcripts (D217)

kayg commented 2026-10-10 17:11:54 +00:00

Author

Owner

Copy link

Finished #154 on ca-handoff, head 3d10854b45; all six atomic commits pushed. No deployment. Worktree source is clean. Operations procedure: docs/operations/deploy.md; author review and tracked evidence: evidence/ca-handoff/.

Implemented anonymous inherited socketpair transfer authenticated by service UID and the preserved PID, bounded/zeroized frame import, exact retained-issuer validation, stdin detachment before children, same-PID CLI restart/default/--binary and SIGHUP ExecReload. Exec destroys the old signer address space before import; failures remain cold-locked. Initial installation from a release without handoff support requires one cold transition, documented.

Shipping stripped release proof: 25 replacements, CA remained unlocked; 128 actual PTYs retain their original shim PIDs, all reattach, resumed input/output verified. Scale: 10000 retained host records, 50 users; these are not claimed as live QUIC connections. Restart p50=30.736ms, max=39.541ms. New HTTP TCP refusal upper bracket p50=23.795ms, max=29.478ms, configured 1ms probe, 212 refusal samples. 8 CPUs, Intel i9-9900K, Linux 6.12.111; local weighted scope CPUWeight=10000; load before=5.93/13.18/15.33, after=6.10/12.97/15.24. Cold/malformed imports locked; foreign PID and non-owner access refused; abrupt receiver stop during seed import followed by locked cold successor. Parser property corpus and fuzz target included.

CA suite 42 PASS (7 ignored diagnostics); remote server suite 49 PASS (10 ignored diagnostics); infraternal-agent remote suite 22 PASS (2 ignored); shipping handoff integration 1 PASS explicitly executed. TypeScript compiler/check/production bundle budgets/protocol tests PASS (34462 assertions). Remote feature-off cargo check PASS; cargo tree -d inspected, no new dependencies.

Both binaries stripped/static, PT_INTERP absent: x86 19938720 bytes (+41728 vs production19896992); ARM 17769176 (+39344 vs production17729832). Final docs/evidence add zero bytes. D205 permits the legacy size-only gate failure; no budget/profile changes or baseline waiver. Existing SQLite concurrent recovery failure was rerun; later complete gates pass its test row. Raw output whitespace is preserved deliberately in the tracked transcripts.

How to test:

1. With an unlocked CA, run the service account's infraternal server --data restart --binary ; check health and administrator CA status.
2. Resume a terminal, then reload with SIGHUP/systemctl reload and repeat; use the retained binary through the same restart command for rollback.
3. Run the explicit shipping test from evidence/ca-handoff/README.md; a normal cold start must report locked.

Verbatim final scripts/verify fast output (size-only failure):

Running as unit: run-p1675382-i39383597.scope; invocation ID: b852035a1f384872b93c489190409a63
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.61 p99_ms=314.51 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.57s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.77s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 21 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.54s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.01s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.16s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.26s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.48s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.74s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.09s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test join_to_same_tag_grants_both_initiation_directions ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test directional_grants_union_and_minimal_updates ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.13s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 305 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok

test result: ok. 274 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 212.85s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.20s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 43.09s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.47s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.44s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19938720 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19938720 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished #154 on ca-handoff, head 3d10854b450ce035a31582e7b6aa2335952bedda; all six atomic commits pushed. No deployment. Worktree source is clean. Operations procedure: docs/operations/deploy.md; author review and tracked evidence: evidence/ca-handoff/. Implemented anonymous inherited socketpair transfer authenticated by service UID and the preserved PID, bounded/zeroized frame import, exact retained-issuer validation, stdin detachment before children, same-PID CLI restart/default/--binary and SIGHUP ExecReload. Exec destroys the old signer address space before import; failures remain cold-locked. Initial installation from a release without handoff support requires one cold transition, documented. Shipping stripped release proof: 25 replacements, CA remained unlocked; 128 actual PTYs retain their original shim PIDs, all reattach, resumed input/output verified. Scale: 10000 retained host records, 50 users; these are not claimed as live QUIC connections. Restart p50=30.736ms, max=39.541ms. New HTTP TCP refusal upper bracket p50=23.795ms, max=29.478ms, configured 1ms probe, 212 refusal samples. 8 CPUs, Intel i9-9900K, Linux 6.12.111; local weighted scope CPUWeight=10000; load before=5.93/13.18/15.33, after=6.10/12.97/15.24. Cold/malformed imports locked; foreign PID and non-owner access refused; abrupt receiver stop during seed import followed by locked cold successor. Parser property corpus and fuzz target included. CA suite 42 PASS (7 ignored diagnostics); remote server suite 49 PASS (10 ignored diagnostics); infraternal-agent remote suite 22 PASS (2 ignored); shipping handoff integration 1 PASS explicitly executed. TypeScript compiler/check/production bundle budgets/protocol tests PASS (34462 assertions). Remote feature-off cargo check PASS; cargo tree -d inspected, no new dependencies. Both binaries stripped/static, PT_INTERP absent: x86 19938720 bytes (+41728 vs production19896992); ARM 17769176 (+39344 vs production17729832). Final docs/evidence add zero bytes. D205 permits the legacy size-only gate failure; no budget/profile changes or baseline waiver. Existing SQLite concurrent recovery failure was rerun; later complete gates pass its test row. Raw output whitespace is preserved deliberately in the tracked transcripts. How to test: 1. With an unlocked CA, run the service account's infraternal server --data <existing directory> restart --binary <verified regular staged binary>; check health and administrator CA status. 2. Resume a terminal, then reload with SIGHUP/systemctl reload and repeat; use the retained binary through the same restart command for rollback. 3. Run the explicit shipping test from evidence/ca-handoff/README.md; a normal cold start must report locked. Verbatim final scripts/verify fast output (size-only failure): ```text Running as unit: run-p1675382-i39383597.scope; invocation ID: b852035a1f384872b93c489190409a63 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.61 p99_ms=314.51 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.57s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.77s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 21 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.54s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.01s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.16s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.26s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.48s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.74s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.09s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test join_to_same_tag_grants_both_initiation_directions ... ok test overlaps_are_reported_without_silent_range_changes ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test directional_grants_union_and_minimal_updates ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test tests::registry_routes_only_declared_actions ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.13s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 305 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test result: ok. 274 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 212.85s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.20s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test frame::checks::tests::golden_and_fragmented ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 43.09s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.47s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.44s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19938720 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19938720 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 17:25:45 +00:00

Author

Owner

Copy link

Starting review round 2 on ca-handoff, prior head 3d10854b45, production base 9fba1eb2dd. Read all 19 comments on #154; no linked parent. Clean merge of origin/release-prod-2 produced 7fade3e0; diff now contains only the CA Rust/action/doc/evidence work. Addressing all eleven findings with failing regressions, atomic commits pushed after each, local weighted gates/fuzz/25-replacement scale proof. Owner-approved round-2 contract: root-only warm handoff, opened-fd exec, versioned binary marker, cold unmarked/rootless fallback; D184/D224 signature verification remains a hook. No deployment.

Starting review round 2 on ca-handoff, prior head 3d10854b450ce035a31582e7b6aa2335952bedda, production base 9fba1eb2dd641aeb397cf03c6f463e3e8703ad3b. Read all 19 comments on #154; no linked parent. Clean merge of origin/release-prod-2 produced 7fade3e0; diff now contains only the CA Rust/action/doc/evidence work. Addressing all eleven findings with failing regressions, atomic commits pushed after each, local weighted gates/fuzz/25-replacement scale proof. Owner-approved round-2 contract: root-only warm handoff, opened-fd exec, versioned binary marker, cold unmarked/rootless fallback; D184/D224 signature verification remains a hook. No deployment.

kayg referenced this issue from a commit 2026-10-10 17:25:48 +00:00

merge: align CA handoff review with production line (D217)

kayg referenced this issue 2026-10-10 17:32:11 +00:00

Release pipeline: signed builds on builds.infraternal.com, verified payloads, add-host by architecture (D220, D224, D225) #157

kayg referenced this issue 2026-10-10 17:36:50 +00:00

Release pipeline: signed builds on builds.infraternal.com, verified payloads, add-host by architecture (D220, D224, D225) #157

kayg commented 2026-10-10 17:38:02 +00:00

Author

Owner

Copy link

P1 reproduced before fix: replacement_never_exports_to_a_general_purpose_binary failed, source.load calls=1 for /usr/bin/bash (p1-before.log). New implementation opens O_RDONLY|O_CLOEXEC|O_NOFOLLOW once, checks inode and parents, and fexecve uses that fd. Warm eligibility requires euid=0, root-owned protected inode/parents and exact ELF INFRATERNAL note type0x49464341/version1. General binaries and rootless replacements use null stdin and explicit cold reply. Six restart tests now pass; separate root invocation confirms /usr/bin/bash never loads the CA source (p1-root-unmarked.log). readelf -n confirms the note; replacement-path rename test confirms the checked inode remains pinned. Signature hook verify_release_fd is explicitly deferred to D184/D224, not advertised as verification. Full gate running; no deployment.

P1 reproduced before fix: replacement_never_exports_to_a_general_purpose_binary failed, source.load calls=1 for /usr/bin/bash (p1-before.log). New implementation opens O_RDONLY|O_CLOEXEC|O_NOFOLLOW once, checks inode and parents, and fexecve uses that fd. Warm eligibility requires euid=0, root-owned protected inode/parents and exact ELF INFRATERNAL note type0x49464341/version1. General binaries and rootless replacements use null stdin and explicit cold reply. Six restart tests now pass; separate root invocation confirms /usr/bin/bash never loads the CA source (p1-root-unmarked.log). readelf -n confirms the note; replacement-path rename test confirms the checked inode remains pinned. Signature hook verify_release_fd is explicitly deferred to D184/D224, not advertised as verification. Full gate running; no deployment.

kayg referenced this issue from a commit 2026-10-10 17:56:16 +00:00

merge: align CA handoff review with production line (D217)

kayg referenced this issue from a commit 2026-10-10 18:14:18 +00:00

fix(restart): pin root-only CA handoff to a marked opened executable (D217)

kayg commented 2026-10-10 18:14:23 +00:00

Author

Owner

Copy link

Completed p1, ca-handoff head a26bd19430, pushed. P1 reproduced before fix: replacement_never_exports_to_a_general_purpose_binary failed, source.load calls=1 for /usr/bin/bash (p1-before.log). New implementation opens O_RDONLY|O_CLOEXEC|O_NOFOLLOW once, checks inode and parents, and fexecve uses that fd. Warm eligibility requires euid=0, root-owned protected inode/parents and exact ELF INFRATERNAL note type0x49464341/version1. General binaries and rootless replacements use null stdin and explicit cold reply. Eight restart tests now pass under both rootless and root execution (root-specific assertions explicitly rerun under /root/.cache/codex-scratch/ca-handoff); separate root invocation confirms /usr/bin/bash never loads the CA source (p1-root-unmarked.log). readelf -n confirms the note; replacement-path rename test confirms the checked inode remains pinned. Signature hook verify_release_fd is explicitly deferred to D184/D224, not advertised as verification. Clippy clean. Full gate permits only the unchanged historical static-size ceiling; no deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p2090337-i39798462.scope; invocation ID: 0a773e8671e84d70853100349c8b162d
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=314.27 p99_ms=320.89 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Blocking waiting for file lock on build directory
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 7.60s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 10.38s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 25 tests
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.59s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.57s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.74s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.38s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test replacement_connection_and_malformed_limit ... ok
test disallowed_signal_only_disconnects_peer ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.51s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.85s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.38s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.50s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test names_versions_and_backend_status ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.42s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_routes_only_declared_actions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.21s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test only_exhausted_auth_returns_typed_choose_method ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.63s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_socket_refuses_an_unrelated_same_user_process ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.25s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 306 tests
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok

test result: ok. 275 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 439.90s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.48s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 99.73s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.80s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.46s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Blocking waiting for file lock on package cache
   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.26
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling cfg-if v1.0.5
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling displaydoc v0.2.7
   Compiling serde v1.0.229
   Compiling find-msvc-tools v0.1.14
   Compiling shlex v2.0.1
   Compiling cc v1.6.0
   Compiling serde_derive v1.0.229
   Compiling zerovec-derive v0.11.6
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling pin-project-lite v0.2.17
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
   Compiling tracing-attributes v0.1.31
   Compiling vcpkg v0.2.15
   Compiling bytes v1.12.1
   Compiling pkg-config v0.3.34
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling smallvec v1.16.2
   Compiling signal-hook-registry v1.4.8
   Compiling tracing v0.1.44
   Compiling tokio-macros v2.7.2
   Compiling mio v1.2.4
   Compiling thiserror v2.0.21
   Compiling zerovec v0.11.8
   Compiling tokio v1.53.2
   Compiling futures-sink v0.3.34
   Compiling thiserror-impl v2.0.21
   Compiling subtle v2.6.1
   Compiling parking_lot_core v0.9.12
   Compiling slab v0.4.12
   Compiling typenum v1.20.1
   Compiling zmij v1.0.23
   Compiling tinystr v0.8.4
   Compiling num-traits v0.2.19
   Compiling writeable v0.6.4
   Compiling crossbeam-utils v0.8.23
   Compiling litemap v0.8.3
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling equivalent v1.0.2
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling libsqlite3-sys v0.30.1
   Compiling openssl-src v300.6.1+3.6.3
   Compiling futures-macro v0.3.34
   Compiling hashbrown v0.17.1
   Compiling zerocopy v0.8.60
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling futures-util v0.3.34
   Compiling indexmap v2.14.2
   Compiling openssl-sys v0.9.117
   Compiling idna_adapter v1.2.2
   Compiling zerocopy-derive v0.8.60
   Compiling cfg_aliases v0.2.2
   Compiling idna v1.1.0
   Compiling getrandom v0.2.17
   Compiling allocator-api2 v0.2.21
   Compiling serde_json v1.0.151
   Compiling foldhash v0.1.5
   Compiling bitflags v2.13.2
   Compiling rand_core v0.10.1
   Compiling hashbrown v0.15.5
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling getrandom v0.4.3
   Compiling sha2 v0.10.9
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling hashlink v0.10.0
   Compiling tokio-stream v0.1.19
   Compiling either v1.18.0
   Compiling spin v0.9.9
   Compiling http v1.5.0
   Compiling base64 v0.22.1
   Compiling heck v0.5.0
   Compiling ryu v1.0.23
   Compiling serde_urlencoded v0.7.1
   Compiling sqlx-core v0.8.6
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling ppv-lite86 v0.2.21
   Compiling getrandom v0.3.4
   Compiling sqlx-sqlite v0.8.6
   Compiling ring v0.17.14
   Compiling dotenvy v0.15.7
   Compiling openssl v0.10.81
   Compiling hex v0.4.3
   Compiling foreign-types-shared v0.1.1
   Compiling foreign-types v0.3.2
   Compiling sqlx-macros-core v0.8.6
   Compiling zeroize v1.9.0
   Compiling memoffset v0.9.1
   Compiling openssl-macros v0.1.1
   Compiling minimal-lexical v0.2.1
   Compiling num-conv v0.2.2
   Compiling thiserror v1.0.69
   Compiling time-core v0.1.9
   Compiling httparse v1.10.1
   Compiling time-macros v0.2.32
   Compiling nom v7.1.3
   Compiling rand_core v0.9.5
   Compiling sqlx-macros v0.8.6
   Compiling http-body v1.1.0
   Compiling nix v0.30.1
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling untrusted v0.9.0
   Compiling deranged v0.5.8
   Compiling arrayvec v0.7.8
   Compiling powerfmt v0.2.1
   Compiling time v0.3.55
   Compiling asn1-rs-derive v0.5.1
   Compiling sqlx v0.8.6
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling rustls-pki-types v1.15.1
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling rustls v0.23.45
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling tinyvec v1.13.3
   Compiling cpufeatures v0.3.1
   Compiling chacha20 v0.10.2
   Compiling asn1-rs v0.6.2
   Compiling rustls-webpki v0.103.15
   Compiling rand v0.9.5
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-plugin-api)
   Compiling uuid v1.27.0
   Compiling rand_core v0.6.4
   Compiling quinn-udp v0.5.16
   Compiling num-integer v0.1.47
   Compiling tokio-openssl v0.6.5
   Compiling pastey v0.1.1
   Compiling try-lock v0.2.5
   Compiling oid-registry v0.7.1
   Compiling atomic-waker v1.1.2
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling httpdate v1.0.3
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling rand v0.10.3
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling webauthn-attestation-ca v0.5.5
   Compiling rustversion v1.0.23
   Compiling unicase v2.10.0
   Compiling rustc-hash v2.1.3
   Compiling tower-layer v0.3.3
   Compiling lru-slab v0.1.3
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling mime v0.3.17
   Compiling quinn-proto v0.11.19
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling hyper v1.11.1
   Compiling vte v0.15.0
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling regex-syntax v0.8.11
   Compiling sync_wrapper v1.0.2
   Compiling webauthn-rs-core v0.5.5
   Compiling utf8parse v0.2.2
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol)
   Compiling anstyle-parse v1.0.0
   Compiling regex-automata v0.4.18
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling hyper-util v0.1.21
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling anstyle-query v1.1.5
   Compiling base64ct v1.8.3
   Compiling anstyle v1.0.14
   Compiling is_terminal_polyfill v1.70.2
   Compiling colorchoice v1.0.5
   Compiling anstream v1.0.0
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling matchers v0.2.0
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts)
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-mesh)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling clap_lex v1.1.1
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling matchit v0.8.4
   Compiling strsim v0.11.1
   Compiling clap_builder v4.6.7
   Compiling axum v0.8.9
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling argon2 v0.5.3
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh)
   Compiling bip39 v2.2.2
   Compiling axum-server v0.8.0
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/ssh)
   Compiling clap_derive v4.6.7
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
   Compiling clap v4.6.7
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 12m 26s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19944624 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19944624 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p1, ca-handoff head a26bd19430205441d76231dc158f011b2366794c, pushed. P1 reproduced before fix: replacement_never_exports_to_a_general_purpose_binary failed, source.load calls=1 for /usr/bin/bash (p1-before.log). New implementation opens O_RDONLY|O_CLOEXEC|O_NOFOLLOW once, checks inode and parents, and fexecve uses that fd. Warm eligibility requires euid=0, root-owned protected inode/parents and exact ELF INFRATERNAL note type0x49464341/version1. General binaries and rootless replacements use null stdin and explicit cold reply. Eight restart tests now pass under both rootless and root execution (root-specific assertions explicitly rerun under /root/.cache/codex-scratch/ca-handoff); separate root invocation confirms /usr/bin/bash never loads the CA source (p1-root-unmarked.log). readelf -n confirms the note; replacement-path rename test confirms the checked inode remains pinned. Signature hook verify_release_fd is explicitly deferred to D184/D224, not advertised as verification. Clippy clean. Full gate permits only the unchanged historical static-size ceiling; no deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p2090337-i39798462.scope; invocation ID: 0a773e8671e84d70853100349c8b162d METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=314.27 p99_ms=320.89 result=PASS ==> fmt ==> VT native fmt ==> clippy Blocking waiting for file lock on build directory Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 7.60s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 10.38s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 25 tests test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.59s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.57s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.74s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.38s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test replacement_connection_and_malformed_limit ... ok test disallowed_signal_only_disconnects_peer ... ok test real_shell_reconnect_resize_and_retained_exit ... ok active test user_scope_survives_parent_unit_stop ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.51s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.85s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.38s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.50s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test names_versions_and_backend_status ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.42s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_routes_only_declared_actions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.21s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test only_exhausted_auth_returns_typed_choose_method ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.63s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_socket_refuses_an_unrelated_same_user_process ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.25s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 306 tests test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test result: ok. 275 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 439.90s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.48s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 99.73s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.80s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.46s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Blocking waiting for file lock on package cache Compiling proc-macro2 v1.0.107 Compiling unicode-ident v1.0.26 Compiling quote v1.0.47 Compiling libc v0.2.190 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling cfg-if v1.0.5 Compiling synstructure v0.14.0 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling displaydoc v0.2.7 Compiling serde v1.0.229 Compiling find-msvc-tools v0.1.14 Compiling shlex v2.0.1 Compiling cc v1.6.0 Compiling serde_derive v1.0.229 Compiling zerovec-derive v0.11.6 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling pin-project-lite v0.2.17 Compiling version_check v0.9.5 Compiling generic-array v0.14.7 Compiling tracing-attributes v0.1.31 Compiling vcpkg v0.2.15 Compiling bytes v1.12.1 Compiling pkg-config v0.3.34 Compiling icu_properties_data v2.3.0 Compiling icu_normalizer_data v2.3.0 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling smallvec v1.16.2 Compiling signal-hook-registry v1.4.8 Compiling tracing v0.1.44 Compiling tokio-macros v2.7.2 Compiling mio v1.2.4 Compiling thiserror v2.0.21 Compiling zerovec v0.11.8 Compiling tokio v1.53.2 Compiling futures-sink v0.3.34 Compiling thiserror-impl v2.0.21 Compiling subtle v2.6.1 Compiling parking_lot_core v0.9.12 Compiling slab v0.4.12 Compiling typenum v1.20.1 Compiling zmij v1.0.23 Compiling tinystr v0.8.4 Compiling num-traits v0.2.19 Compiling writeable v0.6.4 Compiling crossbeam-utils v0.8.23 Compiling litemap v0.8.3 Compiling icu_locale_core v2.3.0 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_collections v2.3.0 Compiling icu_provider v2.3.1 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling equivalent v1.0.2 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling form_urlencoded v1.2.2 Compiling libsqlite3-sys v0.30.1 Compiling openssl-src v300.6.1+3.6.3 Compiling futures-macro v0.3.34 Compiling hashbrown v0.17.1 Compiling zerocopy v0.8.60 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling futures-util v0.3.34 Compiling indexmap v2.14.2 Compiling openssl-sys v0.9.117 Compiling idna_adapter v1.2.2 Compiling zerocopy-derive v0.8.60 Compiling cfg_aliases v0.2.2 Compiling idna v1.1.0 Compiling getrandom v0.2.17 Compiling allocator-api2 v0.2.21 Compiling serde_json v1.0.151 Compiling foldhash v0.1.5 Compiling bitflags v2.13.2 Compiling rand_core v0.10.1 Compiling hashbrown v0.15.5 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling getrandom v0.4.3 Compiling sha2 v0.10.9 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling hashlink v0.10.0 Compiling tokio-stream v0.1.19 Compiling either v1.18.0 Compiling spin v0.9.9 Compiling http v1.5.0 Compiling base64 v0.22.1 Compiling heck v0.5.0 Compiling ryu v1.0.23 Compiling serde_urlencoded v0.7.1 Compiling sqlx-core v0.8.6 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling ppv-lite86 v0.2.21 Compiling getrandom v0.3.4 Compiling sqlx-sqlite v0.8.6 Compiling ring v0.17.14 Compiling dotenvy v0.15.7 Compiling openssl v0.10.81 Compiling hex v0.4.3 Compiling foreign-types-shared v0.1.1 Compiling foreign-types v0.3.2 Compiling sqlx-macros-core v0.8.6 Compiling zeroize v1.9.0 Compiling memoffset v0.9.1 Compiling openssl-macros v0.1.1 Compiling minimal-lexical v0.2.1 Compiling num-conv v0.2.2 Compiling thiserror v1.0.69 Compiling time-core v0.1.9 Compiling httparse v1.10.1 Compiling time-macros v0.2.32 Compiling nom v7.1.3 Compiling rand_core v0.9.5 Compiling sqlx-macros v0.8.6 Compiling http-body v1.1.0 Compiling nix v0.30.1 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling untrusted v0.9.0 Compiling deranged v0.5.8 Compiling arrayvec v0.7.8 Compiling powerfmt v0.2.1 Compiling time v0.3.55 Compiling asn1-rs-derive v0.5.1 Compiling sqlx v0.8.6 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling rustls-pki-types v1.15.1 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling rustls v0.23.45 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling tinyvec v1.13.3 Compiling cpufeatures v0.3.1 Compiling chacha20 v0.10.2 Compiling asn1-rs v0.6.2 Compiling rustls-webpki v0.103.15 Compiling rand v0.9.5 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-plugin-api) Compiling uuid v1.27.0 Compiling rand_core v0.6.4 Compiling quinn-udp v0.5.16 Compiling num-integer v0.1.47 Compiling tokio-openssl v0.6.5 Compiling pastey v0.1.1 Compiling try-lock v0.2.5 Compiling oid-registry v0.7.1 Compiling atomic-waker v1.1.2 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling httpdate v1.0.3 Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling rand v0.10.3 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling webauthn-attestation-ca v0.5.5 Compiling rustversion v1.0.23 Compiling unicase v2.10.0 Compiling rustc-hash v2.1.3 Compiling tower-layer v0.3.3 Compiling lru-slab v0.1.3 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling mime v0.3.17 Compiling quinn-proto v0.11.19 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling hyper v1.11.1 Compiling vte v0.15.0 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling regex-syntax v0.8.11 Compiling sync_wrapper v1.0.2 Compiling webauthn-rs-core v0.5.5 Compiling utf8parse v0.2.2 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol) Compiling anstyle-parse v1.0.0 Compiling regex-automata v0.4.18 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling hyper-util v0.1.21 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling anstyle-query v1.1.5 Compiling base64ct v1.8.3 Compiling anstyle v1.0.14 Compiling is_terminal_polyfill v1.70.2 Compiling colorchoice v1.0.5 Compiling anstream v1.0.0 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling matchers v0.2.0 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts) Compiling unicode-normalization v0.1.25 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-mesh) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling clap_lex v1.1.1 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling matchit v0.8.4 Compiling strsim v0.11.1 Compiling clap_builder v4.6.7 Compiling axum v0.8.9 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling argon2 v0.5.3 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh) Compiling bip39 v2.2.2 Compiling axum-server v0.8.0 Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/ssh) Compiling clap_derive v4.6.7 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Compiling clap v4.6.7 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 12m 26s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19944624 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19944624 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 18:17:32 +00:00

Author

Owner

Copy link

Fuzz prerequisite finding: first CPUWeight=30 cargo fuzz build failed fetching already pinned VT transitive dependencies (HttpConnectionClosing in vaxis/zigimg/uucode; fuzz.log). Copied this job's successfully built pinned VT native/download cache (1.2 GiB) into its separate fuzz target and retried; no dependency/version or compiler change. The five-minute execution timer starts only after successful compilation. Production 9fba1eb2 has no diff in crates/, Cargo.toml, Cargo.lock or .cargo versus prior measured production base 06857458, so the existing x8619896992/ARM17729832 byte size baselines remain applicable. Fast workspace test row completed without a baseline exception; first static build linking under host load ~32/35/33 on 8 CPUs.

Fuzz prerequisite finding: first CPUWeight=30 cargo fuzz build failed fetching already pinned VT transitive dependencies (HttpConnectionClosing in vaxis/zigimg/uucode; fuzz.log). Copied this job's successfully built pinned VT native/download cache (1.2 GiB) into its separate fuzz target and retried; no dependency/version or compiler change. The five-minute execution timer starts only after successful compilation. Production 9fba1eb2 has no diff in crates/, Cargo.toml, Cargo.lock or .cargo versus prior measured production base 06857458, so the existing x8619896992/ARM17729832 byte size baselines remain applicable. Fast workspace test row completed without a baseline exception; first static build linking under host load ~32/35/33 on 8 CPUs.

kayg commented 2026-10-10 19:17:43 +00:00

Author

Owner

Copy link

Startup compatibility finding: SSH prompt authorization at crates/plugins/ssh/src/prompt.rs:49 reads the helper executable through /proc//exe. A real same-UID fork probe with PR_SET_DUMPABLE(false) refuses that lookup with EACCES (round2/ssh-dumpability-probe.log). Checking the real encrypted-key CLI integration before landing global entry hardening; the exact executable/direct-parent authorization must remain intact. CA handoff stays root-only, with first-entry dumpability disabled. No deployment.

Startup compatibility finding: SSH prompt authorization at crates/plugins/ssh/src/prompt.rs:49 reads the helper executable through /proc/<peer PID>/exe. A real same-UID fork probe with PR_SET_DUMPABLE(false) refuses that lookup with EACCES (round2/ssh-dumpability-probe.log). Checking the real encrypted-key CLI integration before landing global entry hardening; the exact executable/direct-parent authorization must remain intact. CA handoff stays root-only, with first-entry dumpability disabled. No deployment.

kayg commented 2026-10-10 19:18:05 +00:00

Author

Owner

Copy link

Completed p2, ca-handoff head 6214794713, pushed. P2 child inheritance fixed. Real subprocess regression failed before the fix (child fd0 was socket), then passed with /dev/null after POSIX spawn actions. Shim helper and systemctl spawn paths now explicitly use null stdin; SSH helpers already have pipes/null and PTY shells explicitly use their PTY. P1 real-fexecve regression proves cold replacement fd0 is /dev/null; unmarked rollback never invokes the signer source. Evidence p2-before.log/p2-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p2617783-i40324626.scope; invocation ID: 9253b5880d784abfb288ca98b3444c36
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=322.06 p99_ms=327.69 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 30.84s

==> test
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 23s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 25 tests
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.99s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.19s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.13s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.29s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.35s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test double_fork_survives_parent_death ... ok
test replacement_connection_and_malformed_limit ... ok
test disallowed_signal_only_disconnects_peer ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.98s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 25.04s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.37s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test exhausted_versions_reject_mutations_without_changing_state ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test names_versions_and_backend_status ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test directional_grants_union_and_minimal_updates ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.29s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok
test review_topic_borrows_plain_and_owns_escaped ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.31s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.14s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.60s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 307 tests
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device has been running for over 60 seconds
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay has been running for over 60 seconds
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes has been running for over 60 seconds
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait has been running for over 60 seconds
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request has been running for over 60 seconds
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay has been running for over 60 seconds
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work has been running for over 60 seconds
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail has been running for over 60 seconds
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider has been running for over 60 seconds
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch has been running for over 60 seconds
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok

test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 520.05s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.30s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::tests::golden_and_fragmented ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::golden::every_frozen_message ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_edge ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 97.69s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.14s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 49s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19945104 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19945104 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p2, ca-handoff head 62147947130338a6c62a3b44476ab483434ce62c, pushed. P2 child inheritance fixed. Real subprocess regression failed before the fix (child fd0 was socket), then passed with /dev/null after POSIX spawn actions. Shim helper and systemctl spawn paths now explicitly use null stdin; SSH helpers already have pipes/null and PTY shells explicitly use their PTY. P1 real-fexecve regression proves cold replacement fd0 is /dev/null; unmarked rollback never invokes the signer source. Evidence p2-before.log/p2-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p2617783-i40324626.scope; invocation ID: 9253b5880d784abfb288ca98b3444c36 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=322.06 p99_ms=327.69 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 30.84s ==> test Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 23s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 25 tests test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.99s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.19s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.13s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.29s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.35s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test double_fork_survives_parent_death ... ok test replacement_connection_and_malformed_limit ... ok test disallowed_signal_only_disconnects_peer ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.98s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 25.04s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.37s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test exhausted_versions_reject_mutations_without_changing_state ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test overlaps_are_reported_without_silent_range_changes ... ok test names_versions_and_backend_status ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test directional_grants_union_and_minimal_updates ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.29s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test tests::registry_routes_only_declared_actions ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test review_topic_borrows_plain_and_owns_escaped ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.31s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.14s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.60s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 307 tests test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device has been running for over 60 seconds test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay has been running for over 60 seconds test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes has been running for over 60 seconds test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait has been running for over 60 seconds test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request has been running for over 60 seconds test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay has been running for over 60 seconds test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work has been running for over 60 seconds test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail has been running for over 60 seconds test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider has been running for over 60 seconds test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch has been running for over 60 seconds test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send has been running for over 60 seconds test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 520.05s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.30s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::tests::golden_and_fragmented ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::golden::every_frozen_message ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_edge ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 97.69s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.14s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 49s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19945104 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19945104 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 19:18:05 +00:00

fix(process): detach child stdin from inherited CA transport (D217)

kayg commented 2026-10-10 19:37:22 +00:00

Author

Owner

Copy link

P3 full gate first attempt: new assertion hit clippy bool_assert_comparison (restart_tests.rs:232), corrected to assert!(!...). Unchanged remote_http_tests.rs:181 also failed certificate admission with Denied under load; this is outside the permitted #118 exceptions and is not waived. Isolated regression and full gate are being rerun with RUST_TEST_THREADS=2 (all tests retained, individual concurrency tests unchanged). Full original output saved as round2/p3-fast-first.log; other fixes remain uncommitted until all required non-size rows pass. No deployment.

P3 full gate first attempt: new assertion hit clippy bool_assert_comparison (restart_tests.rs:232), corrected to assert!(!...). Unchanged remote_http_tests.rs:181 also failed certificate admission with Denied under load; this is outside the permitted #118 exceptions and is not waived. Isolated regression and full gate are being rerun with RUST_TEST_THREADS=2 (all tests retained, individual concurrency tests unchanged). Full original output saved as round2/p3-fast-first.log; other fixes remain uncommitted until all required non-size rows pass. No deployment.

kayg commented 2026-10-10 19:43:22 +00:00

Author

Owner

Copy link

Fuzz build finding: nightly-2026-10-01 inherited production fat LTO and failed to link the ASan-instrumented harness with undefined _sancov_gen* references from asan.module_dtor (round2/fuzz-retry.log). No actual fuzz execution has occurred yet. Retrying with CARGO_PROFILE_RELEASE_LTO=false and STRIP=none for this fuzz command only, retaining ASan/coverage and CPUWeight=30; production profiles and gate budgets remain unchanged. No deployment.

Fuzz build finding: nightly-2026-10-01 inherited production fat LTO and failed to link the ASan-instrumented harness with undefined __sancov_gen_* references from asan.module_dtor (round2/fuzz-retry.log). No actual fuzz execution has occurred yet. Retrying with CARGO_PROFILE_RELEASE_LTO=false and STRIP=none for this fuzz command only, retaining ASan/coverage and CPUWeight=30; production profiles and gate budgets remain unchanged. No deployment.

kayg commented 2026-10-10 19:58:17 +00:00

Author

Owner

Copy link

Resuming CA handoff round 2 on ca-handoff at 6214794713 after disk-full interruption. Read status/diff/log and all #154 comments (no linked parent in issue). P1/P2 and initial production merge are committed; P3 restart-error recovery remains uncommitted with before/after evidence. Production moved again to 6e08065b; will merge it, retain atomic fixes, complete remaining findings and gates. Targets remain under $HOME/.cache/codex-scratch/ca-handoff. No deployment.

Resuming CA handoff round 2 on ca-handoff at 62147947130338a6c62a3b44476ab483434ce62c after disk-full interruption. Read status/diff/log and all #154 comments (no linked parent in issue). P1/P2 and initial production merge are committed; P3 restart-error recovery remains uncommitted with before/after evidence. Production moved again to 6e08065b; will merge it, retain atomic fixes, complete remaining findings and gates. Targets remain under $HOME/.cache/codex-scratch/ca-handoff. No deployment.

kayg referenced this issue from a commit 2026-10-10 19:58:20 +00:00

merge: align CA review with advanced production palette (D217)

kayg referenced this issue 2026-10-10 19:58:32 +00:00

Release pipeline: signed builds on builds.infraternal.com, verified payloads, add-host by architecture (D220, D224, D225) #157

kayg referenced this issue from a commit 2026-10-10 20:12:24 +00:00

fix(restart): keep serving after reply and reload errors (D217)

kayg commented 2026-10-10 20:12:26 +00:00

Author

Owner

Copy link

Completed p3, ca-handoff head 37575d887b, pushed. P3 reply/reload failures fixed. Both regressions failed before repair: closed reply propagated EPIPE out of Control.requested, and renaming a staged binary over the running inode made current_binary fail NotFound. Request errors now log and loop; serve keeps its pinned future on listener errors. Deleted current_exe reopens configured argv[0]. The next real control request still succeeds cold. A third regression reproduced2 receiver opens for a default request; resolution now returns only the path and the receiver checks/execs one pinned fd. Evidence p3-before.log/p3-after.log. No deployment. First full gate exposed one corrected bool assertion lint and unchanged enrollment admission Denied under shared load. Isolated unchanged enrollment test passed0.22s; no #118 exception used. Full gate rerun retains every test with RUST_TEST_THREADS=2.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3081304-i40788118.scope; invocation ID: 90d4e1fa6b7c485a8d3a071ea9bf9c1e
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.04 p99_ms=307.22 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.09s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 6.34s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 28 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 28 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.70s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.53s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.03s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.31s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.95s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.83s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.61s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.27s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.85s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.48s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 307 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 355.89s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 57.26s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.19s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 3m 18s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19946704 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19946704 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p3, ca-handoff head 37575d887b0651acc6929480c8c7cda035cc24c7, pushed. P3 reply/reload failures fixed. Both regressions failed before repair: closed reply propagated EPIPE out of Control.requested, and renaming a staged binary over the running inode made current_binary fail NotFound. Request errors now log and loop; serve keeps its pinned future on listener errors. Deleted current_exe reopens configured argv[0]. The next real control request still succeeds cold. A third regression reproduced2 receiver opens for a default request; resolution now returns only the path and the receiver checks/execs one pinned fd. Evidence p3-before.log/p3-after.log. No deployment. First full gate exposed one corrected bool assertion lint and unchanged enrollment admission Denied under shared load. Isolated unchanged enrollment test passed0.22s; no #118 exception used. Full gate rerun retains every test with RUST_TEST_THREADS=2. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3081304-i40788118.scope; invocation ID: 90d4e1fa6b7c485a8d3a071ea9bf9c1e METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.04 p99_ms=307.22 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.09s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 6.34s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 28 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 28 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.70s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.53s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.03s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.31s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.95s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.83s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.61s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.27s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.85s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.48s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.18s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 307 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 355.89s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.60s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 57.26s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.19s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 3m 18s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19946704 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19946704 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 20:33:07 +00:00

fix(startup): protect dumpability and consume handoff before cold configuration (D217)

kayg commented 2026-10-10 20:33:20 +00:00

Author

Owner

Copy link

Completed p4, ca-handoff head 96128ba5b4, pushed. P4 startup ordering fixed. Fresh exec regression failed while get_dumpable was true; protection is now the first main action. A real inherited-socket subprocess also failed because missing cold trust left fd0 as socket; receive/detach now precedes cold_start, with private Received material installed only against retained issuer. Evidence p4-before.log/p4-after.log. No deployment. Existing encrypted-key CLI regression reproduced proc helper authentication failure after entry hardening; detach helper stdin before restoring its existing dumpable policy, retaining exact executable/direct-parent checks. Server/CA paths remain protected. Evidence p4-ssh-before.log/p4-ssh-after.log.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3229226-i40936029.scope; invocation ID: 29a140d1546b4c1dacdfcc9dff78b182
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=300.85 p99_ms=301.36 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 33.78s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 38s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 30 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.33s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.47s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.83s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.28s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.25s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.96s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.79s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.16s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.21s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.32s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok
test review_topic_borrows_plain_and_owns_escaped ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.41s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.83s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test addresses_never_become_options_or_shell_syntax ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 307 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 301.17s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 73.38s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.24s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 6m 10s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19947536 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19947536 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p4, ca-handoff head 96128ba5b41ebcac4bda48b7cb7afb36beabc619, pushed. P4 startup ordering fixed. Fresh exec regression failed while get_dumpable was true; protection is now the first main action. A real inherited-socket subprocess also failed because missing cold trust left fd0 as socket; receive/detach now precedes cold_start, with private Received material installed only against retained issuer. Evidence p4-before.log/p4-after.log. No deployment. Existing encrypted-key CLI regression reproduced proc helper authentication failure after entry hardening; detach helper stdin before restoring its existing dumpable policy, retaining exact executable/direct-parent checks. Server/CA paths remain protected. Evidence p4-ssh-before.log/p4-ssh-after.log. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3229226-i40936029.scope; invocation ID: 29a140d1546b4c1dacdfcc9dff78b182 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=300.85 p99_ms=301.36 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 33.78s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 38s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 30 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.33s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.47s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.83s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.28s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.25s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test attached_backpressure_and_detached_progress ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.96s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.79s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.16s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.21s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.32s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test review_topic_borrows_plain_and_owns_escaped ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.41s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.83s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test addresses_never_become_options_or_shell_syntax ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 307 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 276 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 301.17s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 73.38s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.24s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 6m 10s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19947536 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19947536 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 20:50:48 +00:00

Author

Owner

Copy link

P11 actual cargo fuzz execution completed under local systemd CPUWeight=30: remote_ca_handoff_decode exercised the bounded CA frame and exact ELF note parsers for311 seconds,12051706 executions, no crash/ASan finding, final cov108/ft231, RSS505MiB. Full build/run transcript is round2/fuzz-final.log; environment observation is round2/fuzz-environment.txt. ASan and coverage retained; command-only LTO=false/strip=none workaround; production profile unchanged. No valid CA key corpus saved or logged. Evidence will be committed after remaining repairs.

Fuzz execution environment observed during the active run
timestamp=2026-10-10T20:47:36.658425+00:00
machine=infraternal-dev
kernel=6.12.111+deb13-amd64
arch=x86_64
logical_cpus=8
load_observed=19.62 35.74 37.53 13/3210 3498824
CPUWeight=30; ASan and sanitizer coverage enabled; max_total_time=310 seconds.
Command-only CARGO_PROFILE_RELEASE_LTO=false and STRIP=none work around nightly sanitizer/fat-LTO link failure; production profiles unchanged.

Final execution line, verbatim:
Done 12051706 runs in 311 second(s)

P11 actual cargo fuzz execution completed under local systemd CPUWeight=30: remote_ca_handoff_decode exercised the bounded CA frame and exact ELF note parsers for311 seconds,12051706 executions, no crash/ASan finding, final cov108/ft231, RSS505MiB. Full build/run transcript is round2/fuzz-final.log; environment observation is round2/fuzz-environment.txt. ASan and coverage retained; command-only LTO=false/strip=none workaround; production profile unchanged. No valid CA key corpus saved or logged. Evidence will be committed after remaining repairs. Fuzz execution environment observed during the active run timestamp=2026-10-10T20:47:36.658425+00:00 machine=infraternal-dev kernel=6.12.111+deb13-amd64 arch=x86_64 logical_cpus=8 load_observed=19.62 35.74 37.53 13/3210 3498824 CPUWeight=30; ASan and sanitizer coverage enabled; max_total_time=310 seconds. Command-only CARGO_PROFILE_RELEASE_LTO=false and STRIP=none work around nightly sanitizer/fat-LTO link failure; production profiles unchanged. Final execution line, verbatim: Done 12051706 runs in 311 second(s)

kayg referenced this issue from a commit 2026-10-10 20:53:35 +00:00

fix(ca): close private stdin if null descriptor cleanup fails (D217)

kayg commented 2026-10-10 20:53:37 +00:00

Author

Owner

Copy link

Completed p5, ca-handoff head 38822500fb, pushed. P5 descriptor cleanup fixed. Before repair, injected /dev/null open failure left fd0 open (F_GETFD returned 0). The regression now exercises both failed open and failed dup2 in real isolated subprocesses; each returns import failure and closes fd0 (EBADF). Evidence p5-before.log/p5-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3415155-i41121905.scope; invocation ID: 22f58fa8963443f1ad3f0096275b6d69
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.82 p99_ms=320.38 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 10.12s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 46.38s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492)

running 30 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.63s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.80s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.72s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.29s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.22s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.41s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.11s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.59s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.32s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.37s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok
test review_topic_borrows_plain_and_owns_escaped ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.60s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.02s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.48s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.24s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb)

running 308 tests
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 369.12s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.49s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c)

running 74 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 55.26s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 27s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19947536 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19947536 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p5, ca-handoff head 38822500fb9bf6cf50e1fdefefc8e2dcdc465ff8, pushed. P5 descriptor cleanup fixed. Before repair, injected /dev/null open failure left fd0 open (F_GETFD returned 0). The regression now exercises both failed open and failed dup2 in real isolated subprocesses; each returns import failure and closes fd0 (EBADF). Evidence p5-before.log/p5-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3415155-i41121905.scope; invocation ID: 22f58fa8963443f1ad3f0096275b6d69 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.82 p99_ms=320.38 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 10.12s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 46.38s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-3dbdcdd80f433492) running 30 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.63s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-bd1fa858b5e6e4ae) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.80s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-e41b3f483ac87b1b) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.72s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-89fd737557800142) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.29s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-a20cf7afd65fe4b6) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-70d03103dd514dd5) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.22s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-fde2480ca4428553) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-1de7147531f07aec) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.41s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-b456862241617c65) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-7ad96a340e49de33) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.11s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-b3b6d59d95e4fc7a) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.59s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-25c80d1a096e327a) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.32s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-a9812b3f370548b9) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.37s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test review_topic_borrows_plain_and_owns_escaped ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-149a9ac6b1333d1d) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.60s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.02s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.48s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.24s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-5011389aa2112fbb) running 308 tests test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 369.12s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-603fddee9486e5a8) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-87ee7d91fa5ebabc) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.49s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-019bbc1f1d1efc26) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-99a1fc711872955c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-496152c51afc9a26) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-4c7246ff6231cfb7) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-07ea8dfdec7f331c) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-69f225ff3080adcd) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-52e6e72426e56940) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-67ffc9c8d51fcf5c) running 74 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 55.26s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-c502cd554fb112ce) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-523bfdef43cc46cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.93s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 27s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19947536 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19947536 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 21:14:44 +00:00

build(ca): reuse the audited shim boundary for protected handoff buffers (D217)

kayg commented 2026-10-10 21:14:45 +00:00

Author

Owner

Copy link

Completed p6dep, ca-handoff head db0e63d9ee, pushed. P6 prerequisite dependency wiring: reused existing infraternal-shim with an optional ca-handoff feature enabled only by remote. No new third-party dependency/version or foundational library. Unsafe page ownership remains at the existing D40 audited shim boundary. Implementation follows separately. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3545560-i41252310.scope; invocation ID: c438aaabe947466696539d56eb18053b
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=294.64 p99_ms=316.89 result=PASS

==> fmt

==> VT native fmt

==> clippy
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 57.51s

==> test
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 21s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 30 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.87s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.16s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.25s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.87s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.92s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.00s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.76s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.20s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.12s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.43s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.75s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 308 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 410.70s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.90s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 74 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 116.89s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.34s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 5m 22s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19949776 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19949776 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p6dep, ca-handoff head db0e63d9eece68c076c3fddab59c6d3668cc8d1e, pushed. P6 prerequisite dependency wiring: reused existing infraternal-shim with an optional ca-handoff feature enabled only by remote. No new third-party dependency/version or foundational library. Unsafe page ownership remains at the existing D40 audited shim boundary. Implementation follows separately. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3545560-i41252310.scope; invocation ID: c438aaabe947466696539d56eb18053b METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=294.64 p99_ms=316.89 result=PASS ==> fmt ==> VT native fmt ==> clippy Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 57.51s ==> test Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 21s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 30 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.87s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.16s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.25s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.87s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.92s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.00s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.76s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.20s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.12s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.43s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.75s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 308 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 410.70s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.90s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 74 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 62 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 116.89s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.34s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 5m 22s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19949776 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19949776 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 21:30:34 +00:00

feat(process): provide audited locked and dump-excluded transfer pages (D217)

kayg commented 2026-10-10 21:30:35 +00:00

Author

Owner

Copy link

Completed p6module, ca-handoff head f1bafe84c8, pushed. P6 audited mapping module added separately. Kernel /proc/self/smaps regression failed before mlock/MADV_DONTDUMP, then passed with lo and dd flags. Maximum requested storage4096 bytes, exclusive anonymous page ownership, volatile clearing/unmapping on Drop, fail-closed syscall errors. No unrelated allocator pages are locked. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3727800-i41434521.scope; invocation ID: a8b893bcaa6249cf908fae4a3276895e
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=297.90 p99_ms=311.45 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 25.14s

==> test
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 16s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 30 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.17s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.78s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.66s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.52s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.09s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.60s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.17s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.52s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.08s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.16s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.25s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.63s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 308 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 358.65s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.67s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 74.32s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.79s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 3m 41s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19949776 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19949776 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p6module, ca-handoff head f1bafe84c8335bca4e9f3799ac6a445f214d2b47, pushed. P6 audited mapping module added separately. Kernel /proc/self/smaps regression failed before mlock/MADV_DONTDUMP, then passed with lo and dd flags. Maximum requested storage4096 bytes, exclusive anonymous page ownership, volatile clearing/unmapping on Drop, fail-closed syscall errors. No unrelated allocator pages are locked. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3727800-i41434521.scope; invocation ID: a8b893bcaa6249cf908fae4a3276895e METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=297.90 p99_ms=311.45 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 25.14s ==> test Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 16s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 30 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.17s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.78s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.66s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.52s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.09s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.60s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.17s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.52s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.08s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.16s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.25s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.63s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 308 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 277 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 358.65s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.67s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 74.32s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.79s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-shim) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 3m 41s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19949776 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19949776 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 21:46:29 +00:00

fix(ca): pin seed and transport buffers outside the normal heap (D217)

kayg commented 2026-10-10 21:46:30 +00:00

Author

Owner

Copy link

Completed p6, ca-handoff head 1367413c83, pushed. P6 CA buffers fixed. Real serialized-frame smaps regression failed on the old heap vector, then passed with lo/dd flags. Export seed/frame and receive storage now use LockedBytes; failed mlock or MADV_DONTDUMP refuses the handoff cold. On this4KiB-page host peak2 pages=8KiB per server×1 simultaneous transfer, independent of10000 retained hosts/128PTYS; receive needs1 page. OpenSSL-owned key state/API export vector and kernel socket buffers are remaining limitations; the transient export vector is zeroized immediately. Evidence p6-before.log/p6-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p3881264-i41587972.scope; invocation ID: 3f9ecd304d0b49b691dffec0c5434593
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=302.56 p99_ms=323.61 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 18.91s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 31s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 30 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.65s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.04s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.03s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.04s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.11s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.73s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.22s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.07s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.10s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.66s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.30s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.67s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 309 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 278 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 233.95s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 63.01s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 30s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19950704 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19950704 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p6, ca-handoff head 1367413c8365b2dbd080f796de33501d0803bd3d, pushed. P6 CA buffers fixed. Real serialized-frame smaps regression failed on the old heap vector, then passed with lo/dd flags. Export seed/frame and receive storage now use LockedBytes; failed mlock or MADV_DONTDUMP refuses the handoff cold. On this4KiB-page host peak2 pages=8KiB per server×1 simultaneous transfer, independent of10000 retained hosts/128PTYS; receive needs1 page. OpenSSL-owned key state/API export vector and kernel socket buffers are remaining limitations; the transient export vector is zeroized immediately. Evidence p6-before.log/p6-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p3881264-i41587972.scope; invocation ID: 3f9ecd304d0b49b691dffec0c5434593 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=302.56 p99_ms=323.61 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 18.91s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 31s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 30 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.65s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.04s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.03s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.04s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.11s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.73s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.22s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.07s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.10s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.66s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.30s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.67s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 309 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 278 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 233.95s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 63.01s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 30s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19950704 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19950704 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 21:55:42 +00:00

Author

Owner

Copy link

P7 targeted shutdown regressions pass after repair: child cleanup2.03s, runtime bound4.03s. Full gate caught two author-code lint failures: identical waitpid match arms (embedded.rs:1604) and the fixture Child wait missing on its successful manual-reap path (embedded_regressions.rs:725). Combined the arms and made fixture Child::wait unconditional; no lint suppression or runtime budget change. The current gate is retained as failed; a complete corrected gate must pass before P7 commit. No deployment.

P7 targeted shutdown regressions pass after repair: child cleanup2.03s, runtime bound4.03s. Full gate caught two author-code lint failures: identical waitpid match arms (embedded.rs:1604) and the fixture Child wait missing on its successful manual-reap path (embedded_regressions.rs:725). Combined the arms and made fixture Child::wait unconditional; no lint suppression or runtime budget change. The current gate is retained as failed; a complete corrected gate must pass before P7 commit. No deployment.

kayg referenced this issue from a commit 2026-10-10 22:19:18 +00:00

fix(restart): bound runtime shutdown and escalate stalled child cleanup (D217)

kayg commented 2026-10-10 22:19:20 +00:00

Author

Owner

Copy link

Completed p7, ca-handoff head b0a56a42b4, pushed. P7 shutdown fixed. Two regressions failed before repair: SIGTERM-resistant real child exceeded4s and runtime Drop exceeded8s on blocking waitpid. Child cleanup now escalates inside the blocking task (TERM deadline2s, KILL/reap deadline3s), and runtime.shutdown_timeout bounds overall wait4s. No CPU load generators; fixtures use idle sleep and clean their own process group on failure. Evidence p7-before-0/1.log and p7-after-0/1.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p4089643-i41796314.scope; invocation ID: b2ab85dc72db47219baae0bf204b623b
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=322.07 p99_ms=331.86 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 40.10s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 32s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 31 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 31 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.87s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.62s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.97s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.54s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.52s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.37s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.68s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok
test review_topic_borrows_plain_and_owns_escaped ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.53s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.86s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.68s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 310 tests
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 279 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 418.46s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.48s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 60.67s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.50s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19952624 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19952624 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p7, ca-handoff head b0a56a42b488bb7ed8202ed09a4eb8369fc9bd4e, pushed. P7 shutdown fixed. Two regressions failed before repair: SIGTERM-resistant real child exceeded4s and runtime Drop exceeded8s on blocking waitpid. Child cleanup now escalates inside the blocking task (TERM deadline2s, KILL/reap deadline3s), and runtime.shutdown_timeout bounds overall wait4s. No CPU load generators; fixtures use idle sleep and clean their own process group on failure. Evidence p7-before-0/1.log and p7-after-0/1.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p4089643-i41796314.scope; invocation ID: b2ab85dc72db47219baae0bf204b623b METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=322.07 p99_ms=331.86 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 40.10s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 32s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 31 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 31 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.87s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.62s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.97s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.54s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.52s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.37s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.68s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test review_topic_borrows_plain_and_owns_escaped ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.53s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.86s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.68s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 310 tests test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 279 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 418.46s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.48s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 60.67s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.50s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19952624 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19952624 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 22:45:39 +00:00

fix(restart): queue SIGHUP through exec and early startup (D217)

kayg commented 2026-10-10 22:45:45 +00:00

Author

Owner

Copy link

Completed p8, ca-handoff head cae65fd5ff, pushed. P8 early reload fixed. Isolated fresh-image regression died on SIGHUP before Control::start, then passed with a queued reload. The exec thread blocks SIGHUP before fexecve; first server entry blocks before spawning runtime threads, and Control registers the handler before unblocking. Pending signal is consumed after readiness. A second real child regression first reproduced inherited blocked SIGHUP; POSIX spawn now explicitly resets its child signal mask so the infraternal agent and PTY shells retain normal signal policy. Evidence p8-before.log/p8-after.log and p8-mask-before.log/p8-mask-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p39205-i41939671.scope; invocation ID: 38a29aa9141140df9a20115a057aa3da
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=320.00 p99_ms=328.22 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 13s

==> test
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 13s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 32 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 32 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.45s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.01s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.88s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.72s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.15s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.18s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.23s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.60s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.45s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.24s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.38s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 429.03s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.67s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 69.22s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 5m 13s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19953360 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19953360 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p8, ca-handoff head cae65fd5ff9c34664da9cac4ce0bb5b211b610f8, pushed. P8 early reload fixed. Isolated fresh-image regression died on SIGHUP before Control::start, then passed with a queued reload. The exec thread blocks SIGHUP before fexecve; first server entry blocks before spawning runtime threads, and Control registers the handler before unblocking. Pending signal is consumed after readiness. A second real child regression first reproduced inherited blocked SIGHUP; POSIX spawn now explicitly resets its child signal mask so the infraternal agent and PTY shells retain normal signal policy. Evidence p8-before.log/p8-after.log and p8-mask-before.log/p8-mask-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p39205-i41939671.scope; invocation ID: 38a29aa9141140df9a20115a057aa3da METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=320.00 p99_ms=328.22 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/fuzz) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 13s ==> test Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 13s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 32 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 32 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.45s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.01s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.88s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.72s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.15s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.18s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.23s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.60s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.45s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.24s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.38s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 429.03s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.67s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 69.22s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 5m 13s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19953360 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19953360 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 23:00:19 +00:00

fix(server): start HTTP service when local restart control is unavailable (D217)

kayg commented 2026-10-10 23:00:22 +00:00

Author

Owner

Copy link

Completed p9, ca-handoff head 1d7ad48d2b, pushed. P9 startup resilience fixed. A real-process regression with the restart directory path occupied by a regular file failed before the fix; after repair the same server reaches HTTP /healthz200 and logs local control unavailability. Control::start errors no longer abort service startup. Evidence p9-before.log/p9-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p202236-i42102651.scope; invocation ID: 056871ca6e4b47c78b3ddd031de1e163
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=290.34 p99_ms=310.79 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.64s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 13.94s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2)

running 33 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.84s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.84s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.20s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.48s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.16s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.79s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.82s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.21s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.23s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.36s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.59s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 306.22s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.07s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 67.35s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 2m 58s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19954256 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19954256 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p9, ca-handoff head 1d7ad48d2b95b5c33b0276e5423e73c0e7f3b0af, pushed. P9 startup resilience fixed. A real-process regression with the restart directory path occupied by a regular file failed before the fix; after repair the same server reaches HTTP /healthz200 and logs local control unavailability. Control::start errors no longer abort service startup. Evidence p9-before.log/p9-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p202236-i42102651.scope; invocation ID: 056871ca6e4b47c78b3ddd031de1e163 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=290.34 p99_ms=310.79 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.64s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 13.94s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-6a1b8a6cfdc906d2) running 33 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.84s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-b3de4b444e4a68aa) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.84s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-20274de2ec21a69a) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.20s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d7e0b024df6fba08) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.48s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-085427e789314cf5) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-25ee54ad5a4ae05e) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.16s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-18b833b59d04ac3f) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-5b1c64f66d3b59b7) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.79s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-547ca4af98f1c382) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-3bc969cf00737100) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.82s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-34191f5383ee3e9d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.21s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.23s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.36s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.59s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 306.22s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.07s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.83s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 67.35s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 2m 58s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19954256 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19954256 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 23:14:00 +00:00

Author

Owner

Copy link

Completed p10dep, ca-handoff head cd0280fd19, pushed. P10 prerequisite: optional direct reuse of existing tracing, enabled only by remote. No new library/version or separate log sink; shared server logging presents human/JSON diagnostics. Audit behavior follows separately. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p330461-i42230874.scope; invocation ID: af1c481d309f4e928079aee00a1a6b50
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.55 p99_ms=312.86 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 4.73s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 20.74s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 33 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.55s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.89s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.69s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.70s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.78s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.67s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.53s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.30s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.69s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok
test review_topic_borrows_plain_and_owns_escaped ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.46s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.32s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.11s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 321.38s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 56.30s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 3m 33s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19954256 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19954256 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p10dep, ca-handoff head cd0280fd19bbbcbd428935b1393ce099a5c51142, pushed. P10 prerequisite: optional direct reuse of existing tracing, enabled only by remote. No new library/version or separate log sink; shared server logging presents human/JSON diagnostics. Audit behavior follows separately. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p330461-i42230874.scope; invocation ID: af1c481d309f4e928079aee00a1a6b50 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.55 p99_ms=312.86 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 4.73s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 20.74s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 33 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.55s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.89s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.69s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.70s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.78s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.67s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.53s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.30s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.69s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test review_topic_borrows_plain_and_owns_escaped ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.46s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.01s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.32s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.11s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 321.38s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 56.30s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 3m 33s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19954256 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19954256 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-10 23:14:00 +00:00

build(restart): reuse shared tracing for local restart audit records (D217)

kayg commented 2026-10-10 23:30:38 +00:00

Author

Owner

Copy link

Audit full gate first attempt: tests PASS, Clippy FAIL (101): nonminimal peer boolean, manual-let-else/single-match-else, and SO_PEERCRED doc backticks in crates/infraternal/src/restart.rs. Fixed all expressions/comments without suppressions; rerunning full gate before commit. Earlier running-log report that Clippy passed was premature. Evidence p10-fast-first.log retained. No deployment.

Audit full gate first attempt: tests PASS, Clippy FAIL (101): nonminimal peer boolean, manual-let-else/single-match-else, and SO_PEERCRED doc backticks in crates/infraternal/src/restart.rs. Fixed all expressions/comments without suppressions; rerunning full gate before commit. Earlier running-log report that Clippy passed was premature. Evidence p10-fast-first.log retained. No deployment.

kayg referenced this issue from a commit 2026-10-10 23:45:13 +00:00

fix(restart): audit peer credentials, target and warm or cold outcome (D217)

kayg commented 2026-10-10 23:45:24 +00:00

Author

Owner

Copy link

Completed p10, ca-handoff head 15b0a3e614, pushed. P10 audit fixed. Real subprocess regression failed before instrumentation, then matched exact SO_PEERCRED PID/UID, target /usr/bin/bash and cold outcome. All request branches record accepted warm/cold, refusal or reply failure; SIGHUP records origin with no fabricated peer credentials. Debug formatting escapes path control characters. No key bytes or key lengths are logged. Exec failure separately records cold outcome and error kind; successor startup records its actual retained-issuer installation result for correlation by the unchanged service PID. Evidence p10-before.log/p10-after.log. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p650118-i42550500.scope; invocation ID: 250b0fad3b11416eb6df897a206c5ab1
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=307.74 p99_ms=312.50 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.45s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 20.66s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 34 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 34 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.18s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.02s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.12s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.31s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.97s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.44s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.91s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.27s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.40s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.62s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 371.42s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 57.46s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 3m 05s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19973872 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19973872 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed p10, ca-handoff head 15b0a3e61415682b42e8a9498855b8ace3d6aa81, pushed. P10 audit fixed. Real subprocess regression failed before instrumentation, then matched exact SO_PEERCRED PID/UID, target /usr/bin/bash and cold outcome. All request branches record accepted warm/cold, refusal or reply failure; SIGHUP records origin with no fabricated peer credentials. Debug formatting escapes path control characters. No key bytes or key lengths are logged. Exec failure separately records cold outcome and error kind; successor startup records its actual retained-issuer installation result for correlation by the unchanged service PID. Evidence p10-before.log/p10-after.log. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p650118-i42550500.scope; invocation ID: 250b0fad3b11416eb6df897a206c5ab1 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=307.74 p99_ms=312.50 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.45s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 20.66s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 34 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 34 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.18s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.02s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.12s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.31s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.97s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.44s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.91s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.27s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.10s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.40s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.62s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 371.42s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 57.46s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.96s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 3m 05s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19973872 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19973872 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-10 23:51:54 +00:00

Author

Owner

Copy link

Author review found an additional fd edge case after the P5 close-on-error boundary: if fd0 is closed, Opened::open can allocate the checked image on fd0, then stdin redirection overwrites that image; alternatively opening /dev/null on fd0 and dropping its owned File closes it before exec. Two real-fexecve subprocess stages failed before repair (stdin-before.log). Pin the image above all standard descriptors using fd clones, retain the null File through exec, and clear stdin close-on-exec explicitly. No additional target pathname open or unsafe core code. No deployment.

Author review found an additional fd edge case after the P5 close-on-error boundary: if fd0 is closed, Opened::open can allocate the checked image on fd0, then stdin redirection overwrites that image; alternatively opening /dev/null on fd0 and dropping its owned File closes it before exec. Two real-fexecve subprocess stages failed before repair (stdin-before.log). Pin the image above all standard descriptors using fd clones, retain the null File through exec, and clear stdin close-on-exec explicitly. No additional target pathname open or unsafe core code. No deployment.

kayg referenced this issue from a commit 2026-10-11 00:10:55 +00:00

fix(restart): preserve checked code and null input when stdin was closed (D217)

kayg commented 2026-10-11 00:10:56 +00:00

Author

Owner

Copy link

Completed stdin, ca-handoff head 23f382a35e, pushed. Author review found an additional fd edge case after the P5 close-on-error boundary: if fd0 is closed, Opened::open can allocate the checked image on fd0, then stdin redirection overwrites that image; alternatively opening /dev/null on fd0 and dropping its owned File closes it before exec. Two real-fexecve subprocess stages failed before repair (stdin-before.log). Pin the image above all standard descriptors using fd clones, retain the null File through exec, and clear stdin close-on-exec explicitly. No additional target pathname open or unsafe core code. No deployment. The initial Rust successor automatically repaired closed fd0 and masked one case; a native libc probe now independently observes both failures before repair and null stdin afterward. The existing cc toolchain builds it with TMPDIR inside the private job fixture; no dependency was added. Evidence stdin-runtime-masked-before.log, stdin-before.log and stdin-after.log.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p875938-i42776303.scope; invocation ID: 33e83854cfbb4baf91b13fc51467d5bf
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.18 p99_ms=311.74 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 6.13s

==> test
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 26.77s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 35 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.08s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.10s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.17s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 50.08s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.90s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.27s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.77s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.24s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.03s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.46s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.90s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.90s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 463.47s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.73s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.92s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 134.56s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.93s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.07s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 4m 00s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19974896 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed stdin, ca-handoff head 23f382a35edfc5894e63a934c5db650ff48bb9be, pushed. Author review found an additional fd edge case after the P5 close-on-error boundary: if fd0 is closed, Opened::open can allocate the checked image on fd0, then stdin redirection overwrites that image; alternatively opening /dev/null on fd0 and dropping its owned File closes it before exec. Two real-fexecve subprocess stages failed before repair (stdin-before.log). Pin the image above all standard descriptors using fd clones, retain the null File through exec, and clear stdin close-on-exec explicitly. No additional target pathname open or unsafe core code. No deployment. The initial Rust successor automatically repaired closed fd0 and masked one case; a native libc probe now independently observes both failures before repair and null stdin afterward. The existing cc toolchain builds it with TMPDIR inside the private job fixture; no dependency was added. Evidence stdin-runtime-masked-before.log, stdin-before.log and stdin-after.log. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p875938-i42776303.scope; invocation ID: 33e83854cfbb4baf91b13fc51467d5bf METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.18 p99_ms=311.74 result=PASS ==> fmt ==> VT native fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 6.13s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 26.77s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 35 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.08s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.10s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.17s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 50.08s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.90s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.27s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.77s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.24s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.03s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.46s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.90s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.90s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test check_is_exact_bounded_and_rejects_every_truncation ... ok test addresses_never_become_options_or_shell_syntax ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 463.47s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.73s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.92s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 134.56s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.93s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.07s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Finished `release` profile [optimized] target(s) in 4m 00s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19974896 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 00:17:54 +00:00

Author

Owner

Copy link

Root shipping first attempt failed only in the harness shim_pids lookup: root sessions deliberately use /run/infraternal, ignoring XDG_RUNTIME_DIR (crates/infraternal-agent/src/sessions.rs:175). Rootless shipping passed explicit cold reply/state, same PID, null stdin and EPIPE preservation. Terminated exactly the 128 shims belonging to this job’s private copied executable using pidfds; no other process was signalled. Rerunning root benchmark in a private mount namespace with /run bound to this job’s root scratch runtime directory; the existing production runtime policy is unchanged and all sockets stay inside the job. Evidence shipping-root-first.log and shipping-root-first-server.log; no deployment.

Root shipping first attempt failed only in the harness shim_pids lookup: root sessions deliberately use /run/infraternal, ignoring XDG_RUNTIME_DIR (crates/infraternal-agent/src/sessions.rs:175). Rootless shipping passed explicit cold reply/state, same PID, null stdin and EPIPE preservation. Terminated exactly the 128 shims belonging to this job’s private copied executable using pidfds; no other process was signalled. Rerunning root benchmark in a private mount namespace with /run bound to this job’s root scratch runtime directory; the existing production runtime policy is unchanged and all sockets stay inside the job. Evidence shipping-root-first.log and shipping-root-first-server.log; no deployment.

kayg commented 2026-10-11 00:19:53 +00:00

Author

Owner

Copy link

Real shipping checks pass. User mode: explicit cold reply, locked CA after same-PID replacement, /dev/null fd0, deterministic EPIPE preserves the live server. Root, private mount namespace bound to this job’s scratch runtime (PID/network unchanged): 25 warm replacements, 50 users/10000 retained records/128 live PTYs; original shim PIDs survive, all reattach and accept new input. Unmarked root rollback also replies cold and proves locked CA/null fd0. Root p50=26.856 ms/max=36.962 ms (round1 30.736/39.541, observed deltas -3.880/-2.579 ms); refusal brackets p50=21.023/max=26.725 ms, 205 samples. Load before12.92/17.07/25.40, after16.90/17.75/25.53; CPUWeight=10000 locally on infraternal-dev. Different UID/load than round1: delta is observed, not an isolated causal estimate. Evidence shipping-root.log, shipping-rootless.log and server audit logs under job round2 scratch; source crates/infraternal-server/src/ca_handoff_shipping_tests.rs. Full gate running before test commit. No deployment.

Real shipping checks pass. User mode: explicit cold reply, locked CA after same-PID replacement, /dev/null fd0, deterministic EPIPE preserves the live server. Root, private mount namespace bound to this job’s scratch runtime (PID/network unchanged): 25 warm replacements, 50 users/10000 retained records/128 live PTYs; original shim PIDs survive, all reattach and accept new input. Unmarked root rollback also replies cold and proves locked CA/null fd0. Root p50=26.856 ms/max=36.962 ms (round1 30.736/39.541, observed deltas -3.880/-2.579 ms); refusal brackets p50=21.023/max=26.725 ms, 205 samples. Load before12.92/17.07/25.40, after16.90/17.75/25.53; CPUWeight=10000 locally on infraternal-dev. Different UID/load than round1: delta is observed, not an isolated causal estimate. Evidence shipping-root.log, shipping-rootless.log and server audit logs under job round2 scratch; source crates/infraternal-server/src/ca_handoff_shipping_tests.rs. Full gate running before test commit. No deployment.

kayg commented 2026-10-11 00:23:43 +00:00

Author

Owner

Copy link

Shipping full gate first attempt failed the unchanged crates/infraternal/tests/shim.rs attached_backpressure_and_detached_progress test: producer never stalled at head1515 (minimum1847). Clippy and dependency rows pass; static ceiling remains the known failure. This is outside the #118 waiver list: no waiver or assertion change is used. Rerun the exact test, then require a passing fresh full test row before committing. Real root25/user-mode shipping proofs already passed; evidence shipping-fast-first.log retained.

Shipping full gate first attempt failed the unchanged crates/infraternal/tests/shim.rs attached_backpressure_and_detached_progress test: producer never stalled at head1515 (minimum1847). Clippy and dependency rows pass; static ceiling remains the known failure. This is outside the #118 waiver list: no waiver or assertion change is used. Rerun the exact test, then require a passing fresh full test row before committing. Real root25/user-mode shipping proofs already passed; evidence shipping-fast-first.log retained.

kayg commented 2026-10-11 00:25:12 +00:00

Author

Owner

Copy link

Exact unchanged shim backpressure rerun passes: 1 passed/0 failed in0.26 s (shipping-shim-rerun.log). Initial full-gate failure retained in shipping-fast-first.log. No #118 waiver, assertion change or production fix: rerunning the full fast gate and requiring every non-size row PASS before committing the shipping tests. Root/user-mode shipping proof remains green; no need to repeat its25 replacements.

Exact unchanged shim backpressure rerun passes: 1 passed/0 failed in0.26 s (shipping-shim-rerun.log). Initial full-gate failure retained in shipping-fast-first.log. No #118 waiver, assertion change or production fix: rerunning the full fast gate and requiring every non-size row PASS before committing the shipping tests. Root/user-mode shipping proof remains green; no need to repeat its25 replacements.

kayg commented 2026-10-11 00:34:03 +00:00

Author

Owner

Copy link

Completed shipping, ca-handoff head 1b494d4b58, pushed. Shipping integration completed: load_before=12.08 27.38 31.19 8/3003 1045314
Running as unit: run-p1045315-i42945559.scope; invocation ID: f72e25824c6246a9ae8b5aa68610443c

running 1 test
METRIC name=ca_handoff_rootless n=1 restart_cold=true reply_cold=true pid_preserved=true fd0_dev_null=true epipe_keeps_server=true
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 310 filtered out; finished in 0.54s

load_after=12.08 27.38 31.19 10/3018 1045390

Private mount namespace: /run bind-mounted from /root/.cache/codex-scratch/ca-handoff/r; PID/network namespaces unchanged.
load_before=12.92 17.07 25.40 5/2863 1073164
Running as unit: run-p1073165-i42973409.scope; invocation ID: e2a3496aa7e149c9bbb0d0b347aa4405

running 1 test
METRIC name=ca_handoff_unmarked_rollback root_owned=true restart_cold=true reply_cold=true pid_preserved=true fd0_dev_null=true epipe_keeps_server=true
METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=26.856 max_ms=36.962 refused_window_bracket_p50_ms=21.023 refused_window_bracket_max_ms=26.725 refused_samples=205 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 310 filtered out; finished in 6.30s

load_after=16.90 17.75 25.53 13/2912 1075091

CPUWeight=10000 locally; release binary, protected root install, private mount namespace runtime paths, 50 users/10000 retained records/128 real PTYs. Root fixed runtime-path harness failure and cleanup are recorded separately; no production runtime policy changed. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p1118124-i43018368.scope; invocation ID: 895bf3021b1a4d3aa43cb0b2d4dd7b5e
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=310.28 p99_ms=317.69 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.97s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 35 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.41s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.42s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.97s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.11s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test attached_backpressure_and_detached_progress ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.89s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.82s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.61s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.59s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.84s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.38s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.58s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 290.33s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_disable_answers_inflight_call ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 47.63s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.35s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19974896 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed shipping, ca-handoff head 1b494d4b58560d818db6b532946d15af4af81f42, pushed. Shipping integration completed: load_before=12.08 27.38 31.19 8/3003 1045314 Running as unit: run-p1045315-i42945559.scope; invocation ID: f72e25824c6246a9ae8b5aa68610443c running 1 test METRIC name=ca_handoff_rootless n=1 restart_cold=true reply_cold=true pid_preserved=true fd0_dev_null=true epipe_keeps_server=true test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 310 filtered out; finished in 0.54s load_after=12.08 27.38 31.19 10/3018 1045390 Private mount namespace: /run bind-mounted from /root/.cache/codex-scratch/ca-handoff/r; PID/network namespaces unchanged. load_before=12.92 17.07 25.40 5/2863 1073164 Running as unit: run-p1073165-i42973409.scope; invocation ID: e2a3496aa7e149c9bbb0d0b347aa4405 running 1 test METRIC name=ca_handoff_unmarked_rollback root_owned=true restart_cold=true reply_cold=true pid_preserved=true fd0_dev_null=true epipe_keeps_server=true METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=26.856 max_ms=36.962 refused_window_bracket_p50_ms=21.023 refused_window_bracket_max_ms=26.725 refused_samples=205 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 310 filtered out; finished in 6.30s load_after=16.90 17.75 25.53 13/2912 1075091 CPUWeight=10000 locally; release binary, protected root install, private mount namespace runtime paths, 50 users/10000 retained records/128 real PTYs. Root fixed runtime-path harness failure and cleanup are recorded separately; no production runtime policy changed. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p1118124-i43018368.scope; invocation ID: 895bf3021b1a4d3aa43cb0b2d4dd7b5e METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=310.28 p99_ms=317.69 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.97s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 35 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.41s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.42s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.97s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.11s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.17s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test attached_backpressure_and_detached_progress ... ok active test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.89s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.82s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.61s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 5.59s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test addresses_are_unique_stable_and_not_recycled ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.84s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.38s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.58s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 290.33s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_disable_answers_inflight_call ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 47.63s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.35s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19974896 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-11 00:34:03 +00:00

test(restart): exercise root warm and user-mode cold shipping replacements (D217)

kayg commented 2026-10-11 00:45:53 +00:00

Author

Owner

Copy link

Deployment-doc gate first test attempt hit the unchanged real_cli_askpass_refuses_unregistered_parent_and_cleans_helper fixture at crates/infraternal/tests/ssh_askpass.rs:46: exec Text file busy (errno26), before helper code runs. Encrypted synthetic-key helper test passed in the same suite. Exact compiled-fixture rerun: Running as unit: run-p1300676-i43200915.scope; invocation ID: 788737b1aa2345c9a153ae7b01837f8a

running 1 test
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.01s

No #118 waiver, assertion, permission or production code change. Retain docs-fast-first.log after this gate finishes, then require a fresh full test row PASS. ARM compilation is independently progressing and holds the release build directory lock. No deployment.

Deployment-doc gate first test attempt hit the unchanged real_cli_askpass_refuses_unregistered_parent_and_cleans_helper fixture at crates/infraternal/tests/ssh_askpass.rs:46: exec Text file busy (errno26), before helper code runs. Encrypted synthetic-key helper test passed in the same suite. Exact compiled-fixture rerun: Running as unit: run-p1300676-i43200915.scope; invocation ID: 788737b1aa2345c9a153ae7b01837f8a running 1 test test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.01s No #118 waiver, assertion, permission or production code change. Retain docs-fast-first.log after this gate finishes, then require a fresh full test row PASS. ARM compilation is independently progressing and holds the release build directory lock. No deployment.

kayg commented 2026-10-11 01:06:30 +00:00

Author

Owner

Copy link

Fresh deployment-doc gate failed two unchanged mesh fixtures at crates/infraternal-server/src/mesh_api_tests.rs:52 with PoolTimedOut during pool setup: claude_review_scoped_grant_cannot_target_node_in_unscoped_tag and concurrent_tag_edits_serialize_revisions_and_unique_names. Server result278 passed/2 failed/31 ignored; load29.22/34.68/28.02. Outside #118: no waiver, assertion or production source change. Retain docs-fast-second.log, rerun exact cases, then serialize the test harness (RUST_TEST_THREADS=1) for the remaining full gates to reduce between-fixture contention. Internal concurrent-request scenarios remain unchanged. No deployment.

Fresh deployment-doc gate failed two unchanged mesh fixtures at crates/infraternal-server/src/mesh_api_tests.rs:52 with PoolTimedOut during pool setup: claude_review_scoped_grant_cannot_target_node_in_unscoped_tag and concurrent_tag_edits_serialize_revisions_and_unique_names. Server result278 passed/2 failed/31 ignored; load29.22/34.68/28.02. Outside #118: no waiver, assertion or production source change. Retain docs-fast-second.log, rerun exact cases, then serialize the test harness (RUST_TEST_THREADS=1) for the remaining full gates to reduce between-fixture contention. Internal concurrent-request scenarios remain unchanged. No deployment.

kayg commented 2026-10-11 01:12:34 +00:00

Author

Owner

Copy link

The new job-local fixture root was initially too long: real-binary agent fixture preflight rejected AF_UNIX upstream path116 bytes before running the daemon. Shortened verification-only INFRATERNAL_TEST_STATE_ROOT to /home/kayg/.cache/codex-scratch/ca-handoff/s; scripts/agent_fixture.py preflight accepts the path within the unchanged108-byte kernel bound. No production code/test assertion changed; docs-fast-third.log retained. The next full gate remains serialized, without a waiver.

The new job-local fixture root was initially too long: real-binary agent fixture preflight rejected AF_UNIX upstream path116 bytes before running the daemon. Shortened verification-only INFRATERNAL_TEST_STATE_ROOT to /home/kayg/.cache/codex-scratch/ca-handoff/s; scripts/agent_fixture.py preflight accepts the path within the unchanged108-byte kernel bound. No production code/test assertion changed; docs-fast-third.log retained. The next full gate remains serialized, without a waiver.

kayg commented 2026-10-11 01:36:20 +00:00

Author

Owner

Copy link

Documentation gate fourth attempt: existing auth socket scale continuation assertion failed (279 passed/1 failed/31 ignored). Exact comparison on detached origin/dev f91517019a passed in106.24s at load36.09/32.93/29.57. This does not establish a #118 exception; rerunning full gate. Outputs archived in evidence/ca-handoff/round2/docs-fast-fourth.log and auth-socket-baseline.log.

Documentation gate fourth attempt: existing auth socket scale continuation assertion failed (279 passed/1 failed/31 ignored). Exact comparison on detached origin/dev f91517019a83e6d66226841267f72b82f907ae46 passed in106.24s at load36.09/32.93/29.57. This does not establish a #118 exception; rerunning full gate. Outputs archived in evidence/ca-handoff/round2/docs-fast-fourth.log and auth-socket-baseline.log.

kayg referenced this issue from a commit 2026-10-11 01:52:20 +00:00

docs(operations): describe root-only warm replacement and cold rollback (D217)

kayg commented 2026-10-11 01:52:22 +00:00

Author

Owner

Copy link

Completed docs, ca-handoff head 0c51226234, pushed. Updated docs/operations/deploy.md for root-only marked warm replacement, explicit cold user-mode/unmarked rollback, pinned executable/null descriptor lifetime, external release verification until D184/D224 integration, restart error isolation, early signals, bounded shutdown and protected-buffer residual copies. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p1669615-i43569412.scope; invocation ID: b24520a226524a43bd1309fb7a0adf73
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=318.40 p99_ms=338.19 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.75s

==> test
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent)
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 18s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 35 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.13s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.21s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.05s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 31.24s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test attached_backpressure_and_detached_progress ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.58s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.26s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.29s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.98s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.76s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.45s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 433.84s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.15s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 87.25s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.26s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.39s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 1.46s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19974896 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed docs, ca-handoff head 0c51226234950f6745cd690613fbf94757f93a18, pushed. Updated docs/operations/deploy.md for root-only marked warm replacement, explicit cold user-mode/unmarked rollback, pinned executable/null descriptor lifetime, external release verification until D184/D224 integration, restart error isolation, early signals, bounded shutdown and protected-buffer residual copies. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p1669615-i43569412.scope; invocation ID: b24520a226524a43bd1309fb7a0adf73 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=318.40 p99_ms=338.19 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.75s ==> test Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/remote) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/mesh) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-agent) Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-protocol) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/infraternal) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/ca-handoff/crates/plugins/host-facts) Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 18s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 35 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.13s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.21s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.05s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 31.24s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test attached_backpressure_and_detached_progress ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.58s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.26s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.29s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.98s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.76s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.45s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 433.84s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.15s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 87.25s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.26s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.39s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 1.46s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19974896 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-11 02:04:00 +00:00

docs(evidence): record failing-first review fixes and root shipping measurements (D217)

kayg commented 2026-10-11 02:04:01 +00:00

Author

Owner

Copy link

Completed evidence, ca-handoff head 1da307870c, pushed. Archived all failing-first fixes, real root and user-mode shipping proofs, 25 replacements p50/max 26.856/36.962 ms (observed change -3.880/-2.579 ms), 12051706 fuzz runs in311 seconds, final suites and static growth +77904/+66992 bytes. The unchanged size ceiling remains; no budget/profile change or #118 exception. Independent review remains required. No deployment.

Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged):

Running as unit: run-p1841234-i43740981.scope; invocation ID: e9111b6bb9364820826ac5e917fc0070
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.66 p99_ms=314.38 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.82s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.32s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 35 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.90s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.13s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.99s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test attached_backpressure_and_detached_progress ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.44s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.24s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.84s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.39s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.64s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.94s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.57s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 338.10s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.64s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 61.82s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 6.53s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19974896 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed evidence, ca-handoff head 1da307870ccb11e289d91edfefba705c71a2aa64, pushed. Archived all failing-first fixes, real root and user-mode shipping proofs, 25 replacements p50/max 26.856/36.962 ms (observed change -3.880/-2.579 ms), 12051706 fuzz runs in311 seconds, final suites and static growth +77904/+66992 bytes. The unchanged size ceiling remains; no budget/profile change or #118 exception. Independent review remains required. No deployment. Verbatim scripts/verify fast output (pre-existing static size ceiling unchanged): ```text Running as unit: run-p1841234-i43740981.scope; invocation ID: e9111b6bb9364820826ac5e917fc0070 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.66 p99_ms=314.38 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.82s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.32s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 35 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.90s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.13s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.99s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test attached_backpressure_and_detached_progress ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.44s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.24s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.84s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.39s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.64s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.94s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.57s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 338.10s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.64s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 61.82s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 6.53s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19974896 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 02:05:27 +00:00

Author

Owner

Copy link

Finished review fixes #154, branch ca-handoff, head 1da307870c (pushed). Root-only compatible opened-fd handoff, cold user-mode/unmarked rollback, lifecycle/startup/error handling, protected buffers and audit fixes are covered by failing-first regressions and real shipping tests. Additional closed-stdin exec edge fixed. No deployment; issue remains open.

METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=26.856 max_ms=36.962 refused_window_bracket_p50_ms=21.023 refused_window_bracket_max_ms=26.725 refused_samples=205 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true
User mode and unmarked root rollback confirm explicit cold reply, locked CA, same PID and /dev/null stdin. Both real processes preserve service on reply EPIPE. Root scale: 50 users, 10000 retained records, 128 real PTYs; all shim PIDs/reattach/input retained. Benchmark locally CPUWeight=10000; load and baseline comparison in evidence/ca-handoff/README.md. Fuzz: 12051706 runs in311 seconds, CPUWeight=30, no sanitizer finding. ARM/TS/final suites/remote-disabled build all pass. Final static bytes: {'x86_64-unknown-linux-musl': 19974896, 'aarch64-unknown-linux-musl': 17796824}. Only the unchanged pre-existing x86 static-size ceiling fails; no #118 waiver, budget/profile change or private corpus. Release-signature hook deliberately deferred to D184/D224.

Evidence: evidence/ca-handoff/README.md and evidence/ca-handoff/round2; deployment procedure docs/operations/deploy.md. Own author checklist completed; independent review still required. Own scratch targets/fixtures will be removed after evidence archival.

Verbatim final scripts/verify fast output:

Running as unit: run-p1841234-i43740981.scope; invocation ID: e9111b6bb9364820826ac5e917fc0070
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.66 p99_ms=314.38 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.82s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.32s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1)

running 35 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.90s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.13s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441)

running 6 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.99s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64)

running 7 tests
test attached_backpressure_and_detached_progress ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.44s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.24s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.84s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.39s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.64s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.94s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.57s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd)

running 4 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 338.10s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.64s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 75 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 61.82s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 6.53s
/home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19974896 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished review fixes #154, branch ca-handoff, head 1da307870ccb11e289d91edfefba705c71a2aa64 (pushed). Root-only compatible opened-fd handoff, cold user-mode/unmarked rollback, lifecycle/startup/error handling, protected buffers and audit fixes are covered by failing-first regressions and real shipping tests. Additional closed-stdin exec edge fixed. No deployment; issue remains open. METRIC name=ca_handoff_restart n=25 retained_nodes=10000 users=50 real_pty_sessions=128 reattached_sessions=128 p50_ms=26.856 max_ms=36.962 refused_window_bracket_p50_ms=21.023 refused_window_bracket_max_ms=26.725 refused_samples=205 probe_interval_ms=1 cold_start_locked=true invalid_frame_locked=true non_owner_refused=true resumed_pty_input=true User mode and unmarked root rollback confirm explicit cold reply, locked CA, same PID and /dev/null stdin. Both real processes preserve service on reply EPIPE. Root scale: 50 users, 10000 retained records, 128 real PTYs; all shim PIDs/reattach/input retained. Benchmark locally CPUWeight=10000; load and baseline comparison in evidence/ca-handoff/README.md. Fuzz: 12051706 runs in311 seconds, CPUWeight=30, no sanitizer finding. ARM/TS/final suites/remote-disabled build all pass. Final static bytes: {'x86_64-unknown-linux-musl': 19974896, 'aarch64-unknown-linux-musl': 17796824}. Only the unchanged pre-existing x86 static-size ceiling fails; no #118 waiver, budget/profile change or private corpus. Release-signature hook deliberately deferred to D184/D224. Evidence: evidence/ca-handoff/README.md and evidence/ca-handoff/round2; deployment procedure docs/operations/deploy.md. Own author checklist completed; independent review still required. Own scratch targets/fixtures will be removed after evidence archival. Verbatim final scripts/verify fast output: ```text Running as unit: run-p1841234-i43740981.scope; invocation ID: e9111b6bb9364820826ac5e917fc0070 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.66 p99_ms=314.38 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.82s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.32s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal-cc30a0f1883be6e1) running 35 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.90s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_daemon-9f597b1bd7e1b264) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.13s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_queues-7cfba3db4e6dbcc1) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_review-d2cea5e3d9a12441) running 6 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.99s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/agent_sessions-729f0dbe926e7449) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/idle_canary-b51b910fd495afa3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_output-655c7a50cb3397c2) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/shim-defde3b344ddfa64) running 7 tests test attached_backpressure_and_detached_progress ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.44s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/ssh_askpass-e0ac206dd65f9cad) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_credit-0ad5f6a8240d05d8) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 23.24s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/vt_reconnect-cd98466ded66678c) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.84s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 9.39s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.64s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.94s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_plugin_ssh-7e42e5f52993bb04) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/auth_order-242e7632ceb91d68) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/build_removal-e87645ee263c97e6) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/concurrency-ccdcb5d992e7018f) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/config_isolation-d960c45d5152001e) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/credentials-c2ad8ea2bac331b0) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/diagnostics-07bed68225e5392b) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/event_metadata-7148021e2dcccfca) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/foreground-2b053b95bd4842fc) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/host_trust-b4fa4fffbb796b39) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/install-5deff689341db922) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.57s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/model-d58c3f6afc421f8e) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/probe_check-5639e2e8c0807777) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/process-bbdb378ec90518fd) running 4 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/proxy_policy-67e9dd996aba76c7) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/real_ssh-4aada98a34acb5d4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/single_connection-c9e67fa08eb3d443) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/source_completeness-2b626495774cd2a7) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/trust_round2-4f2c97bcc5b11aca) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_server-de30574ebc8e81de) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 338.10s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/catalog_startup-ed4a7e74c960d340) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/enrollment-1e0f71ebe75b6dd7) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.64s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_parser-1c151ec2c0414f40) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_plugin-56f2d541ab93c43a) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_policy-a51575994eb3dca9) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mesh_review_role_scope-54be1497f8c47b03) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_host_review-bfdfc1c2693a2fef) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.53s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/plugin_settings_review-d5ba1858470ae5ca) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/remote_plugin_contract-8b688910b05c0425) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/infraternal_shim-8d88872fb599c816) running 75 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 63 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 61.82s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 6.53s /home/kayg/.cache/codex-scratch/ca-handoff/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19974896 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19974896 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 02:07:27 +00:00

Author

Owner

Copy link

Cleanup complete at pushed head 1da307870c. Removed only this job’s user/root scratch targets, fixtures, exact failed SSH fixture and detached baseline checkout. No root shipping process remains. Worktree clean; origin/ca-handoff matches HEAD. All evidence remains committed in evidence/ca-handoff/round2. No deployment; issue remains open.

Cleanup complete at pushed head 1da307870ccb11e289d91edfefba705c71a2aa64. Removed only this job’s user/root scratch targets, fixtures, exact failed SSH fixture and detached baseline checkout. No root shipping process remains. Worktree clean; origin/ca-handoff matches HEAD. All evidence remains committed in evidence/ca-handoff/round2. No deployment; issue remains open.

kayg commented 2026-10-11 02:23:11 +00:00

Author

Owner

Copy link

Starting independent verification on review-ca-handoff, detached target 1da307870c; merge base with local dev 2eaaaa36a2 (multiple merge bases). Read #154 discussion including previous round; no linked parent. Reviewing target behavior and earlier fixes, with failing tests committed locally only; no push or deployment. Main decisions, contracts and full fast gate included.

Starting independent verification on review-ca-handoff, detached target 1da307870ccb11e289d91edfefba705c71a2aa64; merge base with local dev 2eaaaa36a2dcdda12582150d29c14d660e6bcb2f (multiple merge bases). Read #154 discussion including previous round; no linked parent. Reviewing target behavior and earlier fixes, with failing tests committed locally only; no push or deployment. Main decisions, contracts and full fast gate included.

kayg commented 2026-10-11 03:01:32 +00:00

Author

Owner

Copy link

Independent review completed two reproductions, committed locally on review-ca-handoff (beac3e41 and 8fc382eb). CA-R1 P2: server startup blocks SIGHUP before runtime workers; process::execute leaves it blocked in SSH helpers (real child reports 1 instead of 0; regression reviewer_ssh_helper_does_not_inherit_server_reload_mask fails in 0.04s). CA-R2 P2: restart_binary::Opened::open opens a FIFO before checking regular-file metadata; reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer fails at its 3s subprocess watchdog (3.12s). Exact Rust test bodies exercised production code; normal Cargo runs are queued behind compilation. No implementation fixes or push.

Initial head gate hit only fixture setup at this point: review fixture socket path112 bytes; shortening the review-owned state root before a full rerun. No waiver. Static build/fuzz and independent root scale proof continue.

Independent review completed two reproductions, committed locally on review-ca-handoff (beac3e41 and 8fc382eb). CA-R1 P2: server startup blocks SIGHUP before runtime workers; process::execute leaves it blocked in SSH helpers (real child reports 1 instead of 0; regression reviewer_ssh_helper_does_not_inherit_server_reload_mask fails in 0.04s). CA-R2 P2: restart_binary::Opened::open opens a FIFO before checking regular-file metadata; reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer fails at its 3s subprocess watchdog (3.12s). Exact Rust test bodies exercised production code; normal Cargo runs are queued behind compilation. No implementation fixes or push. Initial head gate hit only fixture setup at this point: review fixture socket path112 bytes; shortening the review-owned state root before a full rerun. No waiver. Static build/fuzz and independent root scale proof continue.

kayg commented 2026-10-11 03:13:11 +00:00

Author

Owner

Copy link

CA-R2 additional real-server evidence: target-head debug binary returns HTTP200 before the owner sends a raw control request naming a FIFO with no writer. A new /healthz connection then times out at1s while the service PID remains alive. Controller polls Opened::open synchronously in the serving future. Own fixture process/FIFO/data cleaned. Test commit8fc382eb remains an intentional P2 failure; no implementation change. CA suite independently passed45/0failed/7ignored in45.93s.

CA-R2 additional real-server evidence: target-head debug binary returns HTTP200 before the owner sends a raw control request naming a FIFO with no writer. A new /healthz connection then times out at1s while the service PID remains alive. Controller polls Opened::open synchronously in the serving future. Own fixture process/FIFO/data cleaned. Test commit8fc382eb remains an intentional P2 failure; no implementation change. CA suite independently passed45/0failed/7ignored in45.93s.

kayg commented 2026-10-11 03:23:22 +00:00

Author

Owner

Copy link

Independent root shipping proof PASS on the exact 19,974,896-byte stripped static x86 target. 25 replacements; 50 users, 10,000 retained node records, 128 real PTYs. Every shim PID survives, every PTY reattaches and accepts input; CA unlock preserved. p50 67.958 ms/max 111.892 ms; refusal brackets p50 49.441/max 99.931 ms, 436 samples. CPUWeight=10000 locally; load before 36.47/33.80/29.18, after 34.07/33.38/29.09. Different load window from author: observed slowdown, not an isolated code regression. Private mount namespace maps only this review scratch tree to root/runtime paths. First run stopped at PTY setup call20 before replacement; unchanged rerun passes, both logs retained.

Normal Cargo runs confirm both committed P2 tests fail (SSH 0.20s, FIFO 3.12s). Corrected scripts/verify fast is running against restored target tracked sources (git diff 1da30787 was empty before execution); reviewer tests restored after its test binaries compiled. No assertion changes/waiver/push/deployment.

Independent root shipping proof PASS on the exact 19,974,896-byte stripped static x86 target. 25 replacements; 50 users, 10,000 retained node records, 128 real PTYs. Every shim PID survives, every PTY reattaches and accepts input; CA unlock preserved. p50 67.958 ms/max 111.892 ms; refusal brackets p50 49.441/max 99.931 ms, 436 samples. CPUWeight=10000 locally; load before 36.47/33.80/29.18, after 34.07/33.38/29.09. Different load window from author: observed slowdown, not an isolated code regression. Private mount namespace maps only this review scratch tree to root/runtime paths. First run stopped at PTY setup call20 before replacement; unchanged rerun passes, both logs retained. Normal Cargo runs confirm both committed P2 tests fail (SSH 0.20s, FIFO 3.12s). Corrected scripts/verify fast is running against restored target tracked sources (git diff 1da30787 was empty before execution); reviewer tests restored after its test binaries compiled. No assertion changes/waiver/push/deployment.

kayg referenced this issue from a commit 2026-10-11 03:36:24 +00:00

test(review): expose server reload mask inherited by SSH helpers (D217)

kayg referenced this issue from a commit 2026-10-11 03:36:24 +00:00

test(review): expose blocking FIFO replacement validation (D217)

kayg referenced this issue from a commit 2026-10-11 03:36:24 +00:00

review: keep the partial CA handoff delta review evidence (#154)

kayg commented 2026-10-11 03:40:11 +00:00

Author

Owner

Copy link

Starting round 3 on ca-handoff at 1da307870c. Read all 61 comments on #154; no linked parent. Cherry-picking unchanged regression commits beac3e41 and 8fc382eb, then fixing CA-R1 child signal inheritance and CA-R2 nonblocking replacement validation (D217/D206). Each logical fix is gated and pushed separately. No deployment.

Starting round 3 on ca-handoff at 1da307870ccb11e289d91edfefba705c71a2aa64. Read all 61 comments on #154; no linked parent. Cherry-picking unchanged regression commits beac3e41 and 8fc382eb, then fixing CA-R1 child signal inheritance and CA-R2 nonblocking replacement validation (D217/D206). Each logical fix is gated and pushed separately. No deployment.

kayg referenced this issue from a commit 2026-10-11 03:40:20 +00:00

test(review): expose server reload mask inherited by SSH helpers (D217)

kayg referenced this issue from a commit 2026-10-11 03:40:23 +00:00

test(review): expose blocking FIFO replacement validation (D217)

kayg referenced this issue from a commit 2026-10-11 03:44:28 +00:00

build(ssh): reuse the audited child process boundary (D217)

kayg commented 2026-10-11 03:46:52 +00:00

Author

Owner

Copy link

Pushed unchanged failing-first review tests as a1ee82a4 (CA-R1) and e8d4c260 (CA-R2). Existing audited infraternal-shim dependency added to SSH in b9a072a9; locked Cargo metadata passes, zero new library choices. Production child-launch audit: SSH execute/master/key helper, embedded POSIX spawn, shim shell, session launcher, systemctl installation and remote uninstall helpers. Embedded mask and PTY mask already reset, but ignored dispositions also need defaults. Native builds are in job-local scratch; regression traces remain files only.

Pushed unchanged failing-first review tests as a1ee82a4 (CA-R1) and e8d4c260 (CA-R2). Existing audited infraternal-shim dependency added to SSH in b9a072a9; locked Cargo metadata passes, zero new library choices. Production child-launch audit: SSH execute/master/key helper, embedded POSIX spawn, shim shell, session launcher, systemctl installation and remote uninstall helpers. Embedded mask and PTY mask already reset, but ignored dispositions also need defaults. Native builds are in job-local scratch; regression traces remain files only.

kayg commented 2026-10-11 03:55:44 +00:00

Author

Owner

Copy link

CA-R1 reproduced locally with unchanged reviewer test: 0 passed/1 failed in 0.13s (signal-before.log); the real helper retains the blocked reload mask. Shared audited reset helper test passes for both Command/pre-exec and POSIX spawn: ignored reload disposition restored to default, child reload unblocked, parent mask unchanged (helper-test.log, 0.01s). Helper clippy passes. CA-R2 initial build stopped because make was absent; retry uses documented nix shell gnumake/perl, with validator still unchanged. Logs under /home/kayg/.cache/codex-scratch/ca-handoff; no signal/process traces printed.

CA-R1 reproduced locally with unchanged reviewer test: 0 passed/1 failed in 0.13s (signal-before.log); the real helper retains the blocked reload mask. Shared audited reset helper test passes for both Command/pre-exec and POSIX spawn: ignored reload disposition restored to default, child reload unblocked, parent mask unchanged (helper-test.log, 0.01s). Helper clippy passes. CA-R2 initial build stopped because make was absent; retry uses documented nix shell gnumake/perl, with validator still unchanged. Logs under /home/kayg/.cache/codex-scratch/ca-handoff; no signal/process traces printed.

kayg referenced this issue from a commit 2026-10-11 03:57:04 +00:00

fix(process): restore default child signal policy at exec (D217)

kayg commented 2026-10-11 03:59:55 +00:00

Author

Owner

Copy link

CA-R2 reproduced with unchanged reviewer subprocess regression: 0 passed/1 failed in 3.06s at the 3-second watchdog (fifo-before-retry.log). Validator now requests O_NONBLOCK|O_NOFOLLOW|O_CLOEXEC, fstats and refuses non-regular inodes before any read, then clears only O_NONBLOCK. Exact-inode pinning and close-on-exec remain intact. CA-R1 SSH process suite passes 5/0 in0.28s; extended SSH launch suites pass (14 ordinary tests; five explicit ignored diagnostics). Spawn diagnostic: 7 alternating batches of128 real children, baseline/reset median462.582/509.044ms, +362.988us/child, +46.462ms/128 launches; no retained per-child storage or idle task. This bounded startup cost restores required signal correctness. Full fast gate running locally CPUWeight=10000; no budget/profile/test relaxation.

CA-R2 reproduced with unchanged reviewer subprocess regression: 0 passed/1 failed in 3.06s at the 3-second watchdog (fifo-before-retry.log). Validator now requests O_NONBLOCK|O_NOFOLLOW|O_CLOEXEC, fstats and refuses non-regular inodes before any read, then clears only O_NONBLOCK. Exact-inode pinning and close-on-exec remain intact. CA-R1 SSH process suite passes 5/0 in0.28s; extended SSH launch suites pass (14 ordinary tests; five explicit ignored diagnostics). Spawn diagnostic: 7 alternating batches of128 real children, baseline/reset median462.582/509.044ms, +362.988us/child, +46.462ms/128 launches; no retained per-child storage or idle task. This bounded startup cost restores required signal correctness. Full fast gate running locally CPUWeight=10000; no budget/profile/test relaxation.

kayg referenced this issue from a commit 2026-10-11 04:05:57 +00:00

test(process): check both spawn adapters and measure child reset cost (D217)

kayg referenced this issue from a commit 2026-10-11 04:08:41 +00:00

fix(ssh): reset signals before bounded helper execution (D217)

kayg commented 2026-10-11 04:08:41 +00:00

Author

Owner

Copy link

Completed crates/plugins/ssh/src/process.rs at 6de850b774, pushed ca-handoff. CA-R1: runtime workers inherit the blocked server reload mask. Apply the shared audited child reset before execute_inner spawns a helper. Reject unblocking the server thread or resetting only the reload signal: both leave inherited child policy inconsistent. The unchanged reviewer test and all five process tests pass; extended SSH launcher suites and real authentication pass. D206 requires preserving and fixing the reviewer P2 test forward.

Completed crates/plugins/ssh/src/process.rs at 6de850b7747a1209e33c374cc5cbfb34d9018a22, pushed ca-handoff. CA-R1: runtime workers inherit the blocked server reload mask. Apply the shared audited child reset before execute_inner spawns a helper. Reject unblocking the server thread or resetting only the reload signal: both leave inherited child policy inconsistent. The unchanged reviewer test and all five process tests pass; extended SSH launcher suites and real authentication pass. D206 requires preserving and fixing the reviewer P2 test forward.

kayg commented 2026-10-11 04:08:44 +00:00

Author

Owner

Copy link

Completed crates/plugins/ssh/src/credentials.rs at f48861f149, pushed ca-handoff. Apply the shared child policy to the direct temporary key-helper spawn found by the CA-R1 launch audit. This path bypasses bounded execute, so fixing execute alone leaves inherited masks and ignored dispositions behind. Reject a duplicate reset implementation. Credential tests and real memory-only key authentication pass; no key lifetime or transport change. D206 requires completing the P2 launch audit.

Completed crates/plugins/ssh/src/credentials.rs at f48861f1496641f0fbc6ff454b5e0de8c94beb9a, pushed ca-handoff. Apply the shared child policy to the direct temporary key-helper spawn found by the CA-R1 launch audit. This path bypasses bounded execute, so fixing execute alone leaves inherited masks and ignored dispositions behind. Reject a duplicate reset implementation. Credential tests and real memory-only key authentication pass; no key lifetime or transport change. D206 requires completing the P2 launch audit.

kayg referenced this issue from a commit 2026-10-11 04:08:44 +00:00

fix(ssh): reset signals in temporary key helpers (D217)

kayg referenced this issue from a commit 2026-10-11 04:08:47 +00:00

fix(ssh): restore default signals for connection helpers (D217)

kayg commented 2026-10-11 04:08:48 +00:00

Author

Owner

Copy link

Completed crates/plugins/ssh/src/master.rs at b347340856, pushed ca-handoff. Apply the audited reset to the direct connection-helper spawn found by the CA-R1 audit. Reject relying on the bounded-command launcher because the master bypasses it. The real SSH single-connection oracle passes, including connection reuse, temporary-helper retirement and refusal to reconnect with retired one-time credentials. D206 requires fixing this P2 finding forward.

Completed crates/plugins/ssh/src/master.rs at b3473408564b4f211524c46096715fafdb37d66d, pushed ca-handoff. Apply the audited reset to the direct connection-helper spawn found by the CA-R1 audit. Reject relying on the bounded-command launcher because the master bypasses it. The real SSH single-connection oracle passes, including connection reuse, temporary-helper retirement and refusal to reconnect with retired one-time credentials. D206 requires fixing this P2 finding forward.

kayg commented 2026-10-11 04:10:35 +00:00

Author

Owner

Copy link

Feature-isolation check caught an author wiring error before the embedded adapter commit: standalone infraternal-server default features omit remote, so its optional direct shim dependency was unavailable (E0433 in embedded-after.log). The embedded infraternal agent already depends on shim unconditionally. Make that existing shared process boundary a nonoptional direct server dependency; keep the ca-handoff feature remote-only. No new engine/version or runtime task. Retrying standalone embedded tests and requiring remote-disabled checks; complete fast gate will rerun after this manifest change.

Feature-isolation check caught an author wiring error before the embedded adapter commit: standalone infraternal-server default features omit remote, so its optional direct shim dependency was unavailable (E0433 in embedded-after.log). The embedded infraternal agent already depends on shim unconditionally. Make that existing shared process boundary a nonoptional direct server dependency; keep the ca-handoff feature remote-only. No new engine/version or runtime task. Retrying standalone embedded tests and requiring remote-disabled checks; complete fast gate will rerun after this manifest change.

kayg commented 2026-10-11 04:11:20 +00:00

Author

Owner

Copy link

Completed step at 2f119822, pushed ca-handoff. Shared audited Command/POSIX spawn signal-reset adapters and PTY reuse. Real ignored-disposition/parent-mask fixture passes; helper clippy passes. Imported reviewer regressions are retained unchanged.

Completed step at 2f119822, pushed ca-handoff. Shared audited Command/POSIX spawn signal-reset adapters and PTY reuse. Real ignored-disposition/parent-mask fixture passes; helper clippy passes. Imported reviewer regressions are retained unchanged.

kayg commented 2026-10-11 04:11:22 +00:00

Author

Owner

Copy link

Completed step at 15808847, pushed ca-handoff. Separate real subprocess tests and seven-round 128-child diagnostic. Both spawn adapters preserve parent policy; diagnostic measured +362.988us/child, +46.462ms/128 launches (infraternal-dev, CPUWeight=10000). Imported reviewer regressions are retained unchanged.

Completed step at 15808847, pushed ca-handoff. Separate real subprocess tests and seven-round 128-child diagnostic. Both spawn adapters preserve parent policy; diagnostic measured +362.988us/child, +46.462ms/128 launches (infraternal-dev, CPUWeight=10000). Imported reviewer regressions are retained unchanged.

kayg commented 2026-10-11 04:12:42 +00:00

Author

Owner

Copy link

Completed crates/infraternal-server/Cargo.toml at 752ab1be61, pushed ca-handoff. The embedded launcher always exists, including without remote. Make its existing transitive shim boundary a direct unconditional dependency, while keeping ca-handoff buffers remote-feature-only. Reject gating child signal correctness on the remote plugin or duplicating syscall code in core. Standalone embedded suite passes 15/0 (one ignored diagnostic); no engine/version was added. D206 requires a build-removable repair.

Completed crates/infraternal-server/Cargo.toml at 752ab1be616e638d74f7b6ef3c7c34eec4c0b09d, pushed ca-handoff. The embedded launcher always exists, including without remote. Make its existing transitive shim boundary a direct unconditional dependency, while keeping ca-handoff buffers remote-feature-only. Reject gating child signal correctness on the remote plugin or duplicating syscall code in core. Standalone embedded suite passes 15/0 (one ignored diagnostic); no engine/version was added. D206 requires a build-removable repair.

kayg referenced this issue from a commit 2026-10-11 04:12:43 +00:00

build(server): expose the existing process boundary without remote (D217)

kayg referenced this issue from a commit 2026-10-11 04:12:45 +00:00

fix(server): reset embedded child dispositions through shared policy (D217)

kayg commented 2026-10-11 04:12:45 +00:00

Author

Owner

Copy link

Completed crates/infraternal-server/src/embedded.rs at 880a225c1a, pushed ca-handoff. Reuse the audited POSIX spawn adapter for embedded infraternal agents, restoring default dispositions as well as the already-cleared mask. Reject retaining a separate mask-only policy, since ignored dispositions survive exec. Standalone embedded suite passes 15/0 with one diagnostic ignored; existing real stdin and reload-mask subprocess tests remain intact. D206 requires completing the CA-R1 launch audit.

Completed crates/infraternal-server/src/embedded.rs at 880a225c1a1b27ea0c5ae9e7802a4e596aee277c, pushed ca-handoff. Reuse the audited POSIX spawn adapter for embedded infraternal agents, restoring default dispositions as well as the already-cleared mask. Reject retaining a separate mask-only policy, since ignored dispositions survive exec. Standalone embedded suite passes 15/0 with one diagnostic ignored; existing real stdin and reload-mask subprocess tests remain intact. D206 requires completing the CA-R1 launch audit.

kayg commented 2026-10-11 04:12:48 +00:00

Author

Owner

Copy link

Completed crates/infraternal-agent/src/sessions.rs at 2fa48cc442, pushed ca-handoff. Apply the audited child reset before the shell closes the trusted channel and launches an init helper or detached shim. Reject relying on the eventual PTY shell reset: intermediary helpers must also receive normal signals. Session suite passes 6/0, one ignored diagnostic; explicit null input and fd3 closure remain unchanged. D206 requires auditing all CA-R1 child launch paths.

Completed crates/infraternal-agent/src/sessions.rs at 2fa48cc44216d5e80a3eff29ad25a24004d5c3ef, pushed ca-handoff. Apply the audited child reset before the shell closes the trusted channel and launches an init helper or detached shim. Reject relying on the eventual PTY shell reset: intermediary helpers must also receive normal signals. Session suite passes 6/0, one ignored diagnostic; explicit null input and fd3 closure remain unchanged. D206 requires auditing all CA-R1 child launch paths.

kayg referenced this issue from a commit 2026-10-11 04:12:48 +00:00

fix(sessions): reset signal policy before shim launch (D217)

kayg referenced this issue from a commit 2026-10-11 04:12:50 +00:00

fix(install): reset service-management helper signals (D217)

kayg commented 2026-10-11 04:12:50 +00:00

Author

Owner

Copy link

Completed crates/infraternal/src/install.rs at ba87fc8f35, pushed ca-handoff. Apply the shared default child policy to both systemctl spawns found by the CA-R1 audit. Reject assuming service-management helpers cannot inherit startup masks, or copying reset code. CLI unit suite passes 36/0 including installation dry-run behavior; helper subprocess tests cover the shared policy. D206 requires fixing the full P2 finding forward.

Completed crates/infraternal/src/install.rs at ba87fc8f35f338a8a9733ca197fffdaa27f4c973, pushed ca-handoff. Apply the shared default child policy to both systemctl spawns found by the CA-R1 audit. Reject assuming service-management helpers cannot inherit startup masks, or copying reset code. CLI unit suite passes 36/0 including installation dry-run behavior; helper subprocess tests cover the shared policy. D206 requires fixing the full P2 finding forward.

kayg commented 2026-10-11 04:12:53 +00:00

Author

Owner

Copy link

Completed crates/infraternal/src/restart_binary.rs at 9a0637d41d, pushed ca-handoff. CA-R2: read-only open of a FIFO without a writer stalls validation outside the request deadline. Open with NONBLOCK, NOFOLLOW and CLOEXEC, fstat and refuse nonregular/untrusted inodes before reading, then clear only NONBLOCK on the same inode. Reject pathname prechecks because substitutions race the subsequent open, and reject an async timeout because it cannot interrupt a blocked open. The unchanged reviewer regression fails before in 3.06s; all 16 restart tests pass after in6.27s, including pinned exec and closed-stdin cases. D206 requires keeping the P2 reviewer regression intact.

Completed crates/infraternal/src/restart_binary.rs at 9a0637d41dbb134e3728838dc46cbc696b95230f, pushed ca-handoff. CA-R2: read-only open of a FIFO without a writer stalls validation outside the request deadline. Open with NONBLOCK, NOFOLLOW and CLOEXEC, fstat and refuse nonregular/untrusted inodes before reading, then clear only NONBLOCK on the same inode. Reject pathname prechecks because substitutions race the subsequent open, and reject an async timeout because it cannot interrupt a blocked open. The unchanged reviewer regression fails before in 3.06s; all 16 restart tests pass after in6.27s, including pinned exec and closed-stdin cases. D206 requires keeping the P2 reviewer regression intact.

kayg referenced this issue from a commit 2026-10-11 04:12:53 +00:00

fix(restart): refuse FIFO replacements before any blocking read (D217)

kayg referenced this issue from a commit 2026-10-11 04:13:52 +00:00

fix(remote): restore signal defaults in removal helpers (D217)

kayg commented 2026-10-11 04:13:52 +00:00

Author

Owner

Copy link

Completed crates/plugins/remote/src/uninstall.rs at a71b3315e9, pushed ca-handoff. Apply the shared audited child policy to the independent uninstall launcher and its systemctl helper, found by the CA-R1 launch audit. Reject relying on SSH execute or embedded spawn because these are direct Command paths. Explicit private-plan/null input and component shutdown ownership remain unchanged. Remote component suite with agent enabled passes 12/0 in6.67s; helper subprocess tests cover the default signal policy. D217 preserves reload ordering in the parent; D206 requires fixing this P2 audit forward.

Completed crates/plugins/remote/src/uninstall.rs at a71b3315e9a6c57f489a5c347150cad888a94f3b, pushed ca-handoff. Apply the shared audited child policy to the independent uninstall launcher and its systemctl helper, found by the CA-R1 launch audit. Reject relying on SSH execute or embedded spawn because these are direct Command paths. Explicit private-plan/null input and component shutdown ownership remain unchanged. Remote component suite with agent enabled passes 12/0 in6.67s; helper subprocess tests cover the default signal policy. D217 preserves reload ordering in the parent; D206 requires fixing this P2 audit forward.

kayg referenced this issue from a commit 2026-10-11 04:40:37 +00:00

docs(ca-handoff): record the two fix-forward repairs and author review (D217)

kayg commented 2026-10-11 04:41:19 +00:00

Author

Owner

Copy link

Completed round-3 author review/documentation at 99b263a5e5, pushed ca-handoff. Both reviewer patches unchanged; real before/after kernel tests, real SSH, rootless shipping and remote-disabled build pass. Final fast: fmt/VT fmt/clippy/test/cargo-deny PASS, known static-size-only FAIL. Static sizes x86 19976240/ARM17798168, +1344 bytes each vs1da30787. Final128-child diagnostic +570.173us/child (+72.982ms total), CPUWeight10000 locally, load before8.87/13.04/17.37 after9.92/13.19/17.40. Evidence links and author checklist verified; raw transcripts follow separately.

Completed round-3 author review/documentation at 99b263a5e520d697561e55f27dd3951e470424d6, pushed ca-handoff. Both reviewer patches unchanged; real before/after kernel tests, real SSH, rootless shipping and remote-disabled build pass. Final fast: fmt/VT fmt/clippy/test/cargo-deny PASS, known static-size-only FAIL. Static sizes x86 19976240/ARM17798168, +1344 bytes each vs1da30787. Final128-child diagnostic +570.173us/child (+72.982ms total), CPUWeight10000 locally, load before8.87/13.04/17.37 after9.92/13.19/17.40. Evidence links and author checklist verified; raw transcripts follow separately.

kayg referenced this issue from a commit 2026-10-11 04:41:23 +00:00

docs(evidence): archive round-three kernel tests and final gates (D217)

kayg commented 2026-10-11 04:44:09 +00:00

Author

Owner

Copy link

Finished ca-handoff round 3 at 2e4526a85a, pushed after all 16 atomic commits. CA-R1 and CA-R2 fixed; both original reviewer patches remain byte-for-byte unchanged. All ordinary workspace/earlier CA tests pass; no #118 baseline exception. Real SSH authentication/connection reuse, rootless shipping and remote-disabled build pass. TypeScript: 144 unit/tracer and 36 protocol tests pass, production checks pass.

Static x86=19976240 bytes, ARM=17798168 bytes; each +1344 vs 1da30787, stripped/static with PT_INTERP absent. No ceiling/profile/version change; fast exits 1 solely at the known static-size ceiling. Local CPUWeight=10000 diagnostic, 128 real child launches ×7 alternating batches: baseline/reset medians 204.024/277.006ms, +570.173us/child (+72.982ms/128). Machine infraternal-dev, 8 CPUs; load before 8.87/13.04/17.37, after 9.92/13.19/17.40. No new idle task; total child RSS was not measured.

Evidence and author checklist: evidence/ca-handoff/round3/README.md plus raw transcripts. Source unchanged by docs/archive. Own scratch targets/fixtures and generated Python cache removed; no compiled fixture process remains. No deployment; issue remains open.

Verbatim scripts/verify fast summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished ca-handoff round 3 at 2e4526a85a73d1f2a4bbb4f0d6326580a9560371, pushed after all 16 atomic commits. CA-R1 and CA-R2 fixed; both original reviewer patches remain byte-for-byte unchanged. All ordinary workspace/earlier CA tests pass; no #118 baseline exception. Real SSH authentication/connection reuse, rootless shipping and remote-disabled build pass. TypeScript: 144 unit/tracer and 36 protocol tests pass, production checks pass. Static x86=19976240 bytes, ARM=17798168 bytes; each +1344 vs 1da30787, stripped/static with PT_INTERP absent. No ceiling/profile/version change; fast exits 1 solely at the known static-size ceiling. Local CPUWeight=10000 diagnostic, 128 real child launches ×7 alternating batches: baseline/reset medians 204.024/277.006ms, +570.173us/child (+72.982ms/128). Machine infraternal-dev, 8 CPUs; load before 8.87/13.04/17.37, after 9.92/13.19/17.40. No new idle task; total child RSS was not measured. Evidence and author checklist: evidence/ca-handoff/round3/README.md plus raw transcripts. Source unchanged by docs/archive. Own scratch targets/fixtures and generated Python cache removed; no compiled fixture process remains. No deployment; issue remains open. Verbatim scripts/verify fast summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 04:51:00 +00:00

Author

Owner

Copy link

Starting independent delta review on review-ca-handoff at 2e4526a8; reviewed base 1da30787, merge base with dev 2eaaaa36. Prior review commits beac3e41/8fc382eb are already cherry-picked unchanged as a1ee82a4/e8d4c260. Will rerun both, inspect only the repair delta and run a fresh weighted fast gate. No push/deployment. #154 has no linked parent.

Starting independent delta review on review-ca-handoff at 2e4526a8; reviewed base 1da30787, merge base with dev 2eaaaa36. Prior review commits beac3e41/8fc382eb are already cherry-picked unchanged as a1ee82a4/e8d4c260. Will rerun both, inspect only the repair delta and run a fresh weighted fast gate. No push/deployment. #154 has no linked parent.

kayg commented 2026-10-11 04:58:34 +00:00

Author

Owner

Copy link

Independent delta evidence committed locally at b515acc1 on review-ca-handoff. Original patches compare byte-identical; CA-R1 now passes1/0 in0.04s, CA-R2 passes1/0 in0.03s. Both spawn adapters/parent mask test passes1/0 in0.01s. Local weighted128-child diagnostic: baseline/reset medians145.456/200.210ms, observed +427.764us/child (+54.754ms/batch), load17.84/19.43/17.60 ->17.86/19.41/17.60 on infraternal-dev. No own build overlap; shared tests/load remain. No new confirmed finding. Evidence evidence/review-ca-handoff/delta/. Fresh full head gate still running, with shortened AF_UNIX fixture root. No push/deployment.

Independent delta evidence committed locally at b515acc1 on review-ca-handoff. Original patches compare byte-identical; CA-R1 now passes1/0 in0.04s, CA-R2 passes1/0 in0.03s. Both spawn adapters/parent mask test passes1/0 in0.01s. Local weighted128-child diagnostic: baseline/reset medians145.456/200.210ms, observed +427.764us/child (+54.754ms/batch), load17.84/19.43/17.60 ->17.86/19.41/17.60 on infraternal-dev. No own build overlap; shared tests/load remain. No new confirmed finding. Evidence evidence/review-ca-handoff/delta/. Fresh full head gate still running, with shortened AF_UNIX fixture root. No push/deployment.

kayg commented 2026-10-11 05:12:15 +00:00

Author

Owner

Copy link

Finished independent delta review #154: MERGE (no P0/P1), verdict merge. Target2e4526a8; reviewed1da30787..2e4526a8 only. New findings P0=0/P1=0/P2=0/P3=0. Earlier CA-R1/CA-R2 P2 tests unchanged and now PASS (0.04s/0.03s); both also pass the full gate. Real child adapters, real-sshd auth/reuse and optional-features-disabled build PASS. Local128-child diagnostic observed +427.764us/child (+54.754ms/batch), load17.84/19.43/17.60 ->17.86/19.41/17.60. Fresh x86 stripped static19,976,240 bytes (+1,344 vs earlier reviewed head), PT_INTERP absent. ARM not independently rebuilt in this bounded delta review. No #118 waiver.

Local evidence commits b515acc1 and d80692bcea on review-ca-handoff; no implementation changes, push or deployment. Evidence evidence/review-ca-handoff/delta/README.md; appended durable review finding status.

Verbatim scripts/verify fast output on target sources (exit1, solely known D205 size ceiling; Rust rows otherwise pass):

Running as unit: run-p3468473-i45366820.scope; invocation ID: 1fb97d54c40a40579395b9412a10524b
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.19 p99_ms=316.25 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.97s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.42s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal-695a777d772bb491)

running 36 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.14s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_daemon-de8d28f3173c928a)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.52s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_queues-7ed77e0893c3f583)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.12s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_review-32b36c192f733cf1)

running 6 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 28.58s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_sessions-f1bbac7855060be7)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/idle_canary-1919830791516ee3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/remote_output-4a8f568510237532)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/shim-2c3ca0d2bd6e9d87)

running 7 tests
test attached_backpressure_and_detached_progress ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test real_shell_reconnect_resize_and_retained_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.88s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/ssh_askpass-be2387df6f8b7f5c)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/vt_credit-9ae10e7a767126f9)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.88s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/vt_reconnect-71e394f96e9c8a37)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.31s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 53 tests
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 8.69s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.28s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 7 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 9 tests
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.54s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_ssh-02a30dda6db1246b)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/auth_order-8370e485a3f0346d)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/build_removal-3134bdbfb0e0f0e3)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/concurrency-3766d6ae92ced0da)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/config_isolation-25472931ad04aef4)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/credentials-d8c6da88bd261bc7)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/diagnostics-07d3289d1c3293b7)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/event_metadata-bda517909c0068f9)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/foreground-8564c79536bd1ef7)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/host_trust-8b1b0f67365e31ad)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/install-d349145bd9b0eef2)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.59s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/model-610654aa19e7b1f4)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/probe_check-61bf65a8dbec3acf)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/process-16290c97198e74ea)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/proxy_policy-ca2b62d6c6e39405)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/real_ssh-b3256cc9f601cc72)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/single_connection-da56c522c3d0a816)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/source_completeness-55ae727bdca56f9e)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/trust_round2-2c16a67be95099fe)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_server-c76a52f01bf19e8d)

running 311 tests
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 371.58s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/catalog_startup-e794e4b516e66349)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/enrollment-e3c30e41ff060e32)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_parser-9e3c9a7afb6e3ddf)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_plugin-f4f40aceb0c729d2)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_policy-3712d6be01333b11)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_role_scope-08f0d123a3551746)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/plugin_host_review-b5c2b9493a89166f)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/plugin_settings_review-dd23a907c4019276)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/remote_plugin_contract-b9762512c398630c)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.76s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 77 tests
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 64 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 67.72s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/detach-af6bf43868555110)

running 1 test
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.13s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   └── hyper v1.11.1
         │       ├── axum v0.8.9
         │       │   └── infraternal-server v0.1.0
         │       │       ├── infraternal v0.1.0
         │       │       └── infraternal-fuzz v0.1.0
         │       ├── axum-server v0.8.0
         │       │   └── infraternal-server v0.1.0 (*)
         │       ├── hyper-util v0.1.21
         │       │   ├── axum v0.8.9 (*)
         │       │   ├── axum-server v0.8.0 (*)
         │       │   ├── infraternal v0.1.0 (*)
         │       │   └── (dev) infraternal-server v0.1.0 (*)
         │       ├── infraternal v0.1.0 (*)
         │       └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   └── hyper v1.11.1
      │       │       ├── axum v0.8.9 (*)
      │       │       ├── axum-server v0.8.0 (*)
      │       │       ├── hyper-util v0.1.21
      │       │       │   ├── axum v0.8.9 (*)
      │       │       │   ├── axum-server v0.8.0 (*)
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   └── hyper v1.11.1
      │           │       ├── axum v0.8.9 (*)
      │           │       ├── axum-server v0.8.0 (*)
      │           │       ├── hyper-util v0.1.21
      │           │       │   ├── axum v0.8.9 (*)
      │           │       │   ├── axum-server v0.8.0 (*)
      │           │       │   ├── infraternal v0.1.0 (*)
      │           │       │   └── (dev) infraternal-server v0.1.0 (*)
      │           │       ├── infraternal v0.1.0 (*)
      │           │       └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-shim)
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-protocol)
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-mesh)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/host-facts)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/mesh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/remote)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/ssh)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 3m 56s
/home/kayg/.cache/codex-scratch/ca-handoff-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 19976240 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 19976240 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished independent delta review #154: MERGE (no P0/P1), verdict merge. Target2e4526a8; reviewed1da30787..2e4526a8 only. New findings P0=0/P1=0/P2=0/P3=0. Earlier CA-R1/CA-R2 P2 tests unchanged and now PASS (0.04s/0.03s); both also pass the full gate. Real child adapters, real-sshd auth/reuse and optional-features-disabled build PASS. Local128-child diagnostic observed +427.764us/child (+54.754ms/batch), load17.84/19.43/17.60 ->17.86/19.41/17.60. Fresh x86 stripped static19,976,240 bytes (+1,344 vs earlier reviewed head), PT_INTERP absent. ARM not independently rebuilt in this bounded delta review. No #118 waiver. Local evidence commits b515acc1 and d80692bceaedb6b4f2e640abc51b8fec1d4c9d64 on review-ca-handoff; no implementation changes, push or deployment. Evidence evidence/review-ca-handoff/delta/README.md; appended durable review finding status. Verbatim scripts/verify fast output on target sources (exit1, solely known D205 size ceiling; Rust rows otherwise pass): ```text Running as unit: run-p3468473-i45366820.scope; invocation ID: 1fb97d54c40a40579395b9412a10524b METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.19 p99_ms=316.25 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.97s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.42s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal-695a777d772bb491) running 36 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.14s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_daemon-de8d28f3173c928a) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.52s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_queues-7ed77e0893c3f583) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.12s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_review-32b36c192f733cf1) running 6 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 28.58s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/agent_sessions-f1bbac7855060be7) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/idle_canary-1919830791516ee3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/remote_output-4a8f568510237532) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/shim-2c3ca0d2bd6e9d87) running 7 tests test attached_backpressure_and_detached_progress ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test real_shell_reconnect_resize_and_retained_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.88s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/ssh_askpass-be2387df6f8b7f5c) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/vt_credit-9ae10e7a767126f9) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.88s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/vt_reconnect-71e394f96e9c8a37) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.31s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 53 tests test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 44 passed; 0 failed; 9 ignored; 0 measured; 0 filtered out; finished in 8.69s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.28s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 7 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 9 tests test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.54s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_plugin_ssh-02a30dda6db1246b) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/auth_order-8370e485a3f0346d) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/build_removal-3134bdbfb0e0f0e3) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/concurrency-3766d6ae92ced0da) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/config_isolation-25472931ad04aef4) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/credentials-d8c6da88bd261bc7) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/diagnostics-07d3289d1c3293b7) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/event_metadata-bda517909c0068f9) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/foreground-8564c79536bd1ef7) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/host_trust-8b1b0f67365e31ad) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/install-d349145bd9b0eef2) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.59s Running tests/model.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/model-610654aa19e7b1f4) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/probe_check-61bf65a8dbec3acf) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/process.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/process-16290c97198e74ea) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/proxy_policy-ca2b62d6c6e39405) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/real_ssh-b3256cc9f601cc72) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/single_connection-da56c522c3d0a816) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/source_completeness-55ae727bdca56f9e) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/trust_round2-2c16a67be95099fe) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_server-c76a52f01bf19e8d) running 311 tests test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 280 passed; 0 failed; 31 ignored; 0 measured; 0 filtered out; finished in 371.58s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/catalog_startup-e794e4b516e66349) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/enrollment-e3c30e41ff060e32) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.69s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_parser-9e3c9a7afb6e3ddf) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_plugin-f4f40aceb0c729d2) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_policy-3712d6be01333b11) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mesh_review_role_scope-08f0d123a3551746) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/plugin_host_review-b5c2b9493a89166f) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/plugin_settings_review-dd23a907c4019276) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/remote_plugin_contract-b9762512c398630c) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.76s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/infraternal_shim-8d88872fb599c816) running 77 tests test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 64 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 67.72s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/detach-af6bf43868555110) running 1 test test closed_standard_descriptors_become_dev_null ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.13s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/ca-handoff-review/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ └── hyper v1.11.1 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── hyper-util v0.1.21 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ └── hyper v1.11.1 │ │ ├── axum v0.8.9 (*) │ │ ├── axum-server v0.8.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-shim) Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-protocol) Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-mesh) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/host-facts) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/mesh) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/remote) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/plugins/ssh) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-ca-handoff/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 3m 56s /home/kayg/.cache/codex-scratch/ca-handoff-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 19976240 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 19976240 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-11 06:09:11 +00:00

Merge ca-handoff into the production batch (#154)

kayg commented 2026-10-11 06:14:37 +00:00

Author

Owner

Copy link

Starting production-batch verification on prod-batch, base/head ebcc73a0ec. Read repository contracts, merge message and #154 history (82 comments; no linked parent), continuing the reviewed round-3 fixes. Auditing every production child launch, then fresh weighted fast/CA/SB-01/DS-01..04/auth/TLS/production tracer gates. TRACER_TEST_PORT=5799; job-local scratch targets, no deployment. Exact origin/tls-session-prod base is 5d02b8d6; recorded x86 artifact 19991488 bytes will be independently rebuilt for the byte delta.

Starting production-batch verification on prod-batch, base/head ebcc73a0ec22f8498a0466b2d8641ac569f87e77. Read repository contracts, merge message and #154 history (82 comments; no linked parent), continuing the reviewed round-3 fixes. Auditing every production child launch, then fresh weighted fast/CA/SB-01/DS-01..04/auth/TLS/production tracer gates. TRACER_TEST_PORT=5799; job-local scratch targets, no deployment. Exact origin/tls-session-prod base is 5d02b8d6; recorded x86 artifact 19991488 bytes will be independently rebuilt for the byte delta.

kayg commented 2026-10-11 06:18:00 +00:00

Author

Owner

Copy link

Launch audit finding: crates/infraternal-shim/src/pty.rs:192,200 double-forks without the audited reset_child_signals policy. sessions.rs:435/436 already uses prepare_child for detection, systemd-run and detached shim launch; PTY spawn uses the shared reset, embedded.rs uses prepare_spawn, install/SSH/uninstall adapters are prepared. Retention/ended-record paths create no subprocess. Same-PID fexecve in restart.rs intentionally preserves queued reload (D217), rather than launching a child. Adding standalone blocked+ignored-SIGHUP detach regression before repair; parent mask must remain unchanged. Initial tracer check lacked installed dependencies; frozen-lockfile install/rerun underway. No new dependencies or budget changes.

Launch audit finding: crates/infraternal-shim/src/pty.rs:192,200 double-forks without the audited reset_child_signals policy. sessions.rs:435/436 already uses prepare_child for detection, systemd-run and detached shim launch; PTY spawn uses the shared reset, embedded.rs uses prepare_spawn, install/SSH/uninstall adapters are prepared. Retention/ended-record paths create no subprocess. Same-PID fexecve in restart.rs intentionally preserves queued reload (D217), rather than launching a child. Adding standalone blocked+ignored-SIGHUP detach regression before repair; parent mask must remain unchanged. Initial tracer check lacked installed dependencies; frozen-lockfile install/rerun underway. No new dependencies or budget changes.

kayg commented 2026-10-11 06:21:26 +00:00

Author

Owner

Copy link

Production tracer verification completed at ebcc73a0 plus uncommitted backend regression fixture (frontend unchanged). Frozen install, bun run check, bun test src, production build, D188 transfer and DS-02 independent review test PASS. Playwright at5799: dead-session (4), detached-output (1), DS-04 retry/input (2), 7 passed in1.8m. Browser plugin unavailable; repository Playwright used. Real production screenshots captured by dead-session spec; no author visual-quality judgment. Raw evidence logs/tracer-retry.log in job scratch.

(pass) palette rows are always titled > a titled row passes through untouched [0.38ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.16ms]
(pass) guideFor > each failure kind names its fix [0.16ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.07ms]
(pass) install diagnostics name the failed step and public host error [0.09ms]
142 pass
0 fail
10901 expect() calls
onDemand chunk-9a9ye4ws.js: identity=3891 gzip=1736 brotli=1521 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-zg6n7gqh.js: identity=13351 gzip=5014 brotli=4482 bytes
deferred chunk-e72ce8mc.js: identity=41401 gzip=15945 brotli=14012 bytes
onDemand chunk-acdpthvq.js: identity=2420 gzip=1198 brotli=1081 bytes
onDemand chunk-rfb9fjvk.js: identity=7662 gzip=3395 brotli=2978 bytes
critical chunk-90h7pn57.js: identity=41568 gzip=14175 brotli=12726 bytes
critical chunk-ec72wxvj.js: identity=9810 gzip=4018 brotli=3459 bytes
critical chunk-bwppvaha.js: identity=703957 gzip=203950 brotli=165155 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=482 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes
onDemand chunk-hygxtb89.js: identity=5823 gzip=2201 brotli=1945 bytes
critical chunk-edkge1nx.js: identity=21235 gzip=6855 brotli=6121 bytes
onDemand chunk-es98hjwk.js: identity=2897 gzip=1207 brotli=1037 bytes
critical chunk-4h8jzww1.js: identity=5443 gzip=2606 brotli=2384 bytes
deferred chunk-qr00vzsb.js: identity=102280 gzip=34768 brotli=30649 bytes
critical chunk-958cgt7z.js: identity=8377 gzip=3575 brotli=3186 bytes
onDemand chunk-e0fs94mx.js: identity=1026 gzip=622 brotli=497 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-gb6bdgd8.js: identity=2188 gzip=1048 brotli=878 bytes
onDemand chunk-zn341cf6.js: identity=552 gzip=406 brotli=306 bytes
critical chunk-0yh8rwvm.js: identity=11771 gzip=4749 brotli=4222 bytes
onDemand chunk-c8aj9mpg.js: identity=2108 gzip=1037 brotli=869 bytes
onDemand chunk-fj8r81sy.js: identity=2824 gzip=1385 brotli=1192 bytes
onDemand chunk-p653n5h0.js: identity=31889 gzip=12265 brotli=11011 bytes
onDemand chunk-fgacwwp5.js: identity=6773 gzip=3175 brotli=2886 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-etaeeaeh.js: identity=540 gzip=353 brotli=313 bytes
critical chunk-ww6108r2.js: identity=2943 gzip=1315 brotli=1134 bytes
onDemand chunk-zwt60rqz.js: identity=5969 gzip=2675 brotli=2430 bytes
onDemand chunk-k4jpemns.js: identity=47806 gzip=15001 brotli=13326 bytes
onDemand chunk-4b1wpzgp.js: identity=1170 gzip=707 brotli=588 bytes
onDemand chunk-dx2h6rry.js: identity=4542 gzip=2002 brotli=1785 bytes
critical chunk-9v9mmkw2.js: identity=199 gzip=160 brotli=139 bytes
critical main.js: identity=108947 gzip=39701 brotli=34474 bytes
onDemand chunk-swe72sn1.js: identity=11529 gzip=4652 brotli=4250 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-saa8dhvk.js: identity=1616 gzip=865 brotli=739 bytes
onDemand chunk-jh1z1rdv.js: identity=1603 gzip=736 brotli=628 bytes
critical chunk-vnmaej5z.js: identity=1914 gzip=840 brotli=714 bytes
onDemand chunk-702kdt64.js: identity=4640 gzip=1931 brotli=1701 bytes
critical chunk-ey1gkh07.js: identity=1104 gzip=668 brotli=606 bytes
onDemand chunk-9jb4avcs.js: identity=5359 gzip=2580 brotli=2299 bytes
critical chunk-qvzpx6av.js: identity=17525 gzip=6117 brotli=5445 bytes
critical chunk-arbccdz8.js: identity=590 gzip=326 brotli=303 bytes
critical chunk-59me0bpc.js: identity=386 gzip=238 brotli=197 bytes
JavaScript transfer, critical: identity=937443 gzip=290393/307200 brotli=241221/256000 bytes
JavaScript transfer, deferred: identity=143681 gzip=50713/51200 brotli=44661/45056 bytes
JavaScript transfer, onDemand: identity=168178 gzip=66191/20480 brotli=58742/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-k4jpemns.js: gzip=15001/20480 brotli=13326/18432 bytes (class total gzip=66191 brotli=58742, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes
deferred_brotli_bytes=44661 budget_bytes=45056
(pass) dead-session production canvas fits the deferred Brotli budget [5.30ms]
1 pass
0 fail
1 expect() calls
accepted_input_bytes: 0,
accepted_input_bytes: 0,
7 passed (1.8m)

Production tracer verification completed at ebcc73a0 plus uncommitted backend regression fixture (frontend unchanged). Frozen install, bun run check, bun test src, production build, D188 transfer and DS-02 independent review test PASS. Playwright at5799: dead-session (4), detached-output (1), DS-04 retry/input (2), 7 passed in1.8m. Browser plugin unavailable; repository Playwright used. Real production screenshots captured by dead-session spec; no author visual-quality judgment. Raw evidence logs/tracer-retry.log in job scratch. (pass) palette rows are always titled > a titled row passes through untouched [0.38ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.16ms] (pass) guideFor > each failure kind names its fix [0.16ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.07ms] (pass) install diagnostics name the failed step and public host error [0.09ms] 142 pass 0 fail 10901 expect() calls onDemand chunk-9a9ye4ws.js: identity=3891 gzip=1736 brotli=1521 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-zg6n7gqh.js: identity=13351 gzip=5014 brotli=4482 bytes deferred chunk-e72ce8mc.js: identity=41401 gzip=15945 brotli=14012 bytes onDemand chunk-acdpthvq.js: identity=2420 gzip=1198 brotli=1081 bytes onDemand chunk-rfb9fjvk.js: identity=7662 gzip=3395 brotli=2978 bytes critical chunk-90h7pn57.js: identity=41568 gzip=14175 brotli=12726 bytes critical chunk-ec72wxvj.js: identity=9810 gzip=4018 brotli=3459 bytes critical chunk-bwppvaha.js: identity=703957 gzip=203950 brotli=165155 bytes critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=482 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes onDemand chunk-hygxtb89.js: identity=5823 gzip=2201 brotli=1945 bytes critical chunk-edkge1nx.js: identity=21235 gzip=6855 brotli=6121 bytes onDemand chunk-es98hjwk.js: identity=2897 gzip=1207 brotli=1037 bytes critical chunk-4h8jzww1.js: identity=5443 gzip=2606 brotli=2384 bytes deferred chunk-qr00vzsb.js: identity=102280 gzip=34768 brotli=30649 bytes critical chunk-958cgt7z.js: identity=8377 gzip=3575 brotli=3186 bytes onDemand chunk-e0fs94mx.js: identity=1026 gzip=622 brotli=497 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-gb6bdgd8.js: identity=2188 gzip=1048 brotli=878 bytes onDemand chunk-zn341cf6.js: identity=552 gzip=406 brotli=306 bytes critical chunk-0yh8rwvm.js: identity=11771 gzip=4749 brotli=4222 bytes onDemand chunk-c8aj9mpg.js: identity=2108 gzip=1037 brotli=869 bytes onDemand chunk-fj8r81sy.js: identity=2824 gzip=1385 brotli=1192 bytes onDemand chunk-p653n5h0.js: identity=31889 gzip=12265 brotli=11011 bytes onDemand chunk-fgacwwp5.js: identity=6773 gzip=3175 brotli=2886 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-etaeeaeh.js: identity=540 gzip=353 brotli=313 bytes critical chunk-ww6108r2.js: identity=2943 gzip=1315 brotli=1134 bytes onDemand chunk-zwt60rqz.js: identity=5969 gzip=2675 brotli=2430 bytes onDemand chunk-k4jpemns.js: identity=47806 gzip=15001 brotli=13326 bytes onDemand chunk-4b1wpzgp.js: identity=1170 gzip=707 brotli=588 bytes onDemand chunk-dx2h6rry.js: identity=4542 gzip=2002 brotli=1785 bytes critical chunk-9v9mmkw2.js: identity=199 gzip=160 brotli=139 bytes critical main.js: identity=108947 gzip=39701 brotli=34474 bytes onDemand chunk-swe72sn1.js: identity=11529 gzip=4652 brotli=4250 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-saa8dhvk.js: identity=1616 gzip=865 brotli=739 bytes onDemand chunk-jh1z1rdv.js: identity=1603 gzip=736 brotli=628 bytes critical chunk-vnmaej5z.js: identity=1914 gzip=840 brotli=714 bytes onDemand chunk-702kdt64.js: identity=4640 gzip=1931 brotli=1701 bytes critical chunk-ey1gkh07.js: identity=1104 gzip=668 brotli=606 bytes onDemand chunk-9jb4avcs.js: identity=5359 gzip=2580 brotli=2299 bytes critical chunk-qvzpx6av.js: identity=17525 gzip=6117 brotli=5445 bytes critical chunk-arbccdz8.js: identity=590 gzip=326 brotli=303 bytes critical chunk-59me0bpc.js: identity=386 gzip=238 brotli=197 bytes JavaScript transfer, critical: identity=937443 gzip=290393/307200 brotli=241221/256000 bytes JavaScript transfer, deferred: identity=143681 gzip=50713/51200 brotli=44661/45056 bytes JavaScript transfer, onDemand: identity=168178 gzip=66191/20480 brotli=58742/18432 bytes JavaScript transfer, onDemand largest chunk chunk-k4jpemns.js: gzip=15001/20480 brotli=13326/18432 bytes (class total gzip=66191 brotli=58742, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes deferred_brotli_bytes=44661 budget_bytes=45056 (pass) dead-session production canvas fits the deferred Brotli budget [5.30ms] 1 pass 0 fail 1 expect() calls accepted_input_bytes: 0, accepted_input_bytes: 0, 7 passed (1.8m)

kayg commented 2026-10-11 06:35:35 +00:00

Author

Owner

Copy link

Confirmed double-fork regression before repair at ebcc73a0: detached_child_restores_default_signals_without_changing_parent, 0 passed/1 failed. Exact actual signal_mask_empty=false child_sighup=None, expected signal_mask_empty=true child_sighup=Some(1), crates/infraternal-shim/tests/detach.rs:45. Standalone probe inherits ignored SIGHUP via a shell and blocks it before detach; the original caller mask is checked separately. Runtime148.27s includes nested Cargo build waiting on the protocol oracle; no signal watchdog fired. Preliminary fast run interrupted during Clippy (exit130) to prioritize this required failing-before proof; not claimed as a completed gate. Full final gate will rerun. Standard supplemental TS fast now PASS: 36 protocol tests/34462 assertions, production budgets unchanged. Logs under job scratch.

Confirmed double-fork regression before repair at ebcc73a0: detached_child_restores_default_signals_without_changing_parent, 0 passed/1 failed. Exact actual signal_mask_empty=false child_sighup=None, expected signal_mask_empty=true child_sighup=Some(1), crates/infraternal-shim/tests/detach.rs:45. Standalone probe inherits ignored SIGHUP via a shell and blocks it before detach; the original caller mask is checked separately. Runtime148.27s includes nested Cargo build waiting on the protocol oracle; no signal watchdog fired. Preliminary fast run interrupted during Clippy (exit130) to prioritize this required failing-before proof; not claimed as a completed gate. Full final gate will rerun. Standard supplemental TS fast now PASS: 36 protocol tests/34462 assertions, production budgets unchanged. Logs under job scratch.

kayg commented 2026-10-11 06:37:53 +00:00

Author

Owner

Copy link

Double-fork fix now passes both standalone detach tests (2/0,2.13s), including all seven closed-stdio masks and original caller-mask preservation. Existing reset_child_signals is reused at each raw fork; no duplicated policy/new dependency/timer. Local CPUWeight10000 benchmark, same GNU debug profile before/after,7 alternating batches of200 real detach launches,no own compile overlap. Running as unit: run-p153205-i46245282.scope; invocation ID: b63e85eace41495f99065b1bad37613f
load_before=22.72 25.53 24.54 4/2949 153207
{"round": 0, "label": "before", "launches": 200, "batch_ms": 371.994879}
{"round": 0, "label": "after", "launches": 200, "batch_ms": 490.346872}
{"round": 1, "label": "after", "launches": 200, "batch_ms": 447.016183}
{"round": 1, "label": "before", "launches": 200, "batch_ms": 450.118447}
{"round": 2, "label": "before", "launches": 200, "batch_ms": 407.638212}
{"round": 2, "label": "after", "launches": 200, "batch_ms": 554.874078}
{"round": 3, "label": "after", "launches": 200, "batch_ms": 447.193228}
{"round": 3, "label": "before", "launches": 200, "batch_ms": 489.794495}
{"round": 4, "label": "before", "launches": 200, "batch_ms": 450.729554}
{"round": 4, "label": "after", "launches": 200, "batch_ms": 479.080426}
{"round": 5, "label": "after", "launches": 200, "batch_ms": 502.731566}
{"round": 5, "label": "before", "launches": 200, "batch_ms": 443.986792}
{"round": 6, "label": "before", "launches": 200, "batch_ms": 446.576097}
{"round": 6, "label": "after", "launches": 200, "batch_ms": 499.230224}
METRIC name=double_fork_signal_reset launches=200 rounds=7 before_batch_p50_ms=446.576 after_batch_p50_ms=490.347 observed_delta_per_launch_us=218.854 observed_delta_at_200_launches_ms=43.771 profile=GNU-debug persistent_reset_state_bytes=0
load_after=20.07 24.87 24.34 6/2955 161806

Bounded launch-only cost is justified by default child signal correctness (D13/D217). Persistent reset state is0 by implementation; total child RSS was not measured. Full final fast gate now running; not yet committed.

Double-fork fix now passes both standalone detach tests (2/0,2.13s), including all seven closed-stdio masks and original caller-mask preservation. Existing reset_child_signals is reused at each raw fork; no duplicated policy/new dependency/timer. Local CPUWeight10000 benchmark, same GNU debug profile before/after,7 alternating batches of200 real detach launches,no own compile overlap. Running as unit: run-p153205-i46245282.scope; invocation ID: b63e85eace41495f99065b1bad37613f load_before=22.72 25.53 24.54 4/2949 153207 {"round": 0, "label": "before", "launches": 200, "batch_ms": 371.994879} {"round": 0, "label": "after", "launches": 200, "batch_ms": 490.346872} {"round": 1, "label": "after", "launches": 200, "batch_ms": 447.016183} {"round": 1, "label": "before", "launches": 200, "batch_ms": 450.118447} {"round": 2, "label": "before", "launches": 200, "batch_ms": 407.638212} {"round": 2, "label": "after", "launches": 200, "batch_ms": 554.874078} {"round": 3, "label": "after", "launches": 200, "batch_ms": 447.193228} {"round": 3, "label": "before", "launches": 200, "batch_ms": 489.794495} {"round": 4, "label": "before", "launches": 200, "batch_ms": 450.729554} {"round": 4, "label": "after", "launches": 200, "batch_ms": 479.080426} {"round": 5, "label": "after", "launches": 200, "batch_ms": 502.731566} {"round": 5, "label": "before", "launches": 200, "batch_ms": 443.986792} {"round": 6, "label": "before", "launches": 200, "batch_ms": 446.576097} {"round": 6, "label": "after", "launches": 200, "batch_ms": 499.230224} METRIC name=double_fork_signal_reset launches=200 rounds=7 before_batch_p50_ms=446.576 after_batch_p50_ms=490.347 observed_delta_per_launch_us=218.854 observed_delta_at_200_launches_ms=43.771 profile=GNU-debug persistent_reset_state_bytes=0 load_after=20.07 24.87 24.34 6/2955 161806 Bounded launch-only cost is justified by default child signal correctness (D13/D217). Persistent reset state is0 by implementation; total child RSS was not measured. Full final fast gate now running; not yet committed.

kayg commented 2026-10-11 07:01:17 +00:00

Author

Owner

Copy link

Confirmed production merge interaction (#151 + #154), not a load waiver: local_session_counts_and_memory_refusals_follow_real_lifecycle failed in full gate and isolated retry (0/1,4.15s), verify-session-bounds.py:82, expected(1,1),actual(0,0). Registry Live::alive at crates/infraternal-agent/src/lifecycle.rs:21 follows /proc//exe, but CA entry protection makes the shim non-dumpable. Owned real-shim diagnostic: socket_exists=True,state=S,exe_exists=False,exe_stat_errno=13(EACCES),exe_lstat_is_symlink=True.
Additive fix choice before implementation: inspect executable-link metadata without following the ptrace-protected link; retain the bounded kernel birth/state check (already excludes Z/X and recycled PIDs), authenticated rendezvous and no idle timer. Never restore dumpability or remove lifetime validation. Add a disposable non-dumpable subprocess regression first.
Interrupted failed fast run during static compilation (exit130); no completed-green summary claimed. Preserved raw logs. Temporarily parked the separately reproduced double-fork patch so registry and fork fixes can be gated/pushed as distinct logical commits. No auth/secret/protocol-policy changes; no deployment.

Confirmed production merge interaction (#151 + #154), not a load waiver: local_session_counts_and_memory_refusals_follow_real_lifecycle failed in full gate and isolated retry (0/1,4.15s), verify-session-bounds.py:82, expected(1,1),actual(0,0). Registry Live::alive at crates/infraternal-agent/src/lifecycle.rs:21 follows /proc/<pid>/exe, but CA entry protection makes the shim non-dumpable. Owned real-shim diagnostic: socket_exists=True,state=S,exe_exists=False,exe_stat_errno=13(EACCES),exe_lstat_is_symlink=True. Additive fix choice before implementation: inspect executable-link metadata without following the ptrace-protected link; retain the bounded kernel birth/state check (already excludes Z/X and recycled PIDs), authenticated rendezvous and no idle timer. Never restore dumpability or remove lifetime validation. Add a disposable non-dumpable subprocess regression first. Interrupted failed fast run during static compilation (exit130); no completed-green summary claimed. Preserved raw logs. Temporarily parked the separately reproduced double-fork patch so registry and fork fixes can be gated/pushed as distinct logical commits. No auth/secret/protocol-policy changes; no deployment.

kayg commented 2026-10-11 07:07:05 +00:00

Author

Owner

Copy link

Added disposable non-dumpable-process regression before repair: nondumpable_process_keeps_its_authenticated_lifetime,0 passed/1 failed in0.02s,count0 instead of1; process reaped before assertion. Implemented executable-link lstat/type check, retaining birth tick, dead-state exclusion and rendezvous checks. All four lifecycle unit tests now PASS, including PID-reuse and proc-inode eviction. Child dumpability stays disabled; privileged test runners may follow the link, so the new test asserts lifetime under either ptrace policy. Complete fast gate running on this registry-only delta; separately saved double-fork patch remains parked. Logs registry-before-workspace.log and registry-after.log. The first package-only regression build was interrupted to reuse the already-built full-workspace feature set; no test failure waived.

Added disposable non-dumpable-process regression before repair: nondumpable_process_keeps_its_authenticated_lifetime,0 passed/1 failed in0.02s,count0 instead of1; process reaped before assertion. Implemented executable-link lstat/type check, retaining birth tick, dead-state exclusion and rendezvous checks. All four lifecycle unit tests now PASS, including PID-reuse and proc-inode eviction. Child dumpability stays disabled; privileged test runners may follow the link, so the new test asserts lifetime under either ptrace policy. Complete fast gate running on this registry-only delta; separately saved double-fork patch remains parked. Logs registry-before-workspace.log and registry-after.log. The first package-only regression build was interrupted to reuse the already-built full-workspace feature set; no test failure waived.

kayg commented 2026-10-11 07:16:24 +00:00

Author

Owner

Copy link

Owner requirement (2026-10-11): after the owner unlocks the CA on the batch deploy, verify the update path before relying on it:

1. The CA stays unlocked across an update with no security issue or leak: key material never on disk, in logs, argv, environment, core dumps or swap; only the verified new binary receives it; a failed or refused update leaves the running server unlocked and the key nowhere else.
2. The update's signature verification is solid: tampered binary, wrong or missing signature, a valid older release under a newer version, the wrong channel and a mismatched VERSION are all refused before anything runs.
   Plan: an independent audit job (defensive verification with failing tests) on the deployed code, plus live checks on monitor01 during a real update to the first signed edge build.

Owner requirement (2026-10-11): after the owner unlocks the CA on the batch deploy, verify the update path before relying on it: 1. The CA stays unlocked across an update with no security issue or leak: key material never on disk, in logs, argv, environment, core dumps or swap; only the verified new binary receives it; a failed or refused update leaves the running server unlocked and the key nowhere else. 2. The update's signature verification is solid: tampered binary, wrong or missing signature, a valid older release under a newer version, the wrong channel and a mismatched VERSION are all refused before anything runs. Plan: an independent audit job (defensive verification with failing tests) on the deployed code, plus live checks on monitor01 during a real update to the first signed edge build.

kayg commented 2026-10-11 07:19:02 +00:00

Author

Owner

Copy link

SB-01 fixture compatibility finding: corrected registry gate passes all8 agent_review tests, then attached_window_recovers_final_output_and_exit_after_shim_link_detaches fails before its data oracle at verify-session-exit-credit.py:50,PermissionError13 on the protected shim FD directory. verify-session-retention.py uses the same ptrace-gated observation. Existing non-dumpable protection is retained.
Proposed shared test-only observer: count the listener/accepted endpoints for this fixture’s unique private rendezvous path in /proc//net/unix. Namespace entries for other paths are excluded. This preserves the exact kernel-backed detach count,5s watchdog,unfunded window,FINAL_OUTPUT/status7 and retention assertions; no fixed sleep substitutes for actual detach. Prototype read succeeds on the real protected shim and observes listener+accepted control=2. Imported Rust SB-01 test remains unchanged. Both fixtures will reuse one helper. No production/protocol change or privilege escalation.

SB-01 fixture compatibility finding: corrected registry gate passes all8 agent_review tests, then attached_window_recovers_final_output_and_exit_after_shim_link_detaches fails before its data oracle at verify-session-exit-credit.py:50,PermissionError13 on the protected shim FD directory. verify-session-retention.py uses the same ptrace-gated observation. Existing non-dumpable protection is retained. Proposed shared test-only observer: count the listener/accepted endpoints for this fixture’s unique private rendezvous path in /proc/<owned pid>/net/unix. Namespace entries for other paths are excluded. This preserves the exact kernel-backed detach count,5s watchdog,unfunded window,FINAL_OUTPUT/status7 and retention assertions; no fixed sleep substitutes for actual detach. Prototype read succeeds on the real protected shim and observes listener+accepted control=2. Imported Rust SB-01 test remains unchanged. Both fixtures will reuse one helper. No production/protocol change or privilege escalation.

kayg commented 2026-10-11 07:24:14 +00:00

Author

Owner

Copy link

Shared dumpability-safe Unix-socket observer implemented in scripts/agent_fixture.py and reused by both retention fixtures. It selects only the unique fixture rendezvous in the owned PID network namespace. Unchanged Rust SB-01 now PASS1/0 in0.98s (real final output/status7 after actual detach); retention PASS1/0 in1.92s (bound,unfunded notification,restart record,retirement handshake race,sibling/control). No deadline or product assertion relaxed; no dumpability change. Broader server suite is running directly from the current compiled test binary while the failed gate finishes its cold static build, to expose any other merge compatibility failures. A fresh complete fast gate is still required before commit. Logs sb01-after.log and retention-after.log.

Shared dumpability-safe Unix-socket observer implemented in scripts/agent_fixture.py and reused by both retention fixtures. It selects only the unique fixture rendezvous in the owned PID network namespace. Unchanged Rust SB-01 now PASS1/0 in0.98s (real final output/status7 after actual detach); retention PASS1/0 in1.92s (bound,unfunded notification,restart record,retirement handshake race,sibling/control). No deadline or product assertion relaxed; no dumpability change. Broader server suite is running directly from the current compiled test binary while the failed gate finishes its cold static build, to expose any other merge compatibility failures. A fresh complete fast gate is still required before commit. Logs sb01-after.log and retention-after.log.

kayg commented 2026-10-11 08:14:09 +00:00

Author

Owner

Copy link

Protected-shim compatibility fix passed the full workspace tests (including SB-01, retention, 5 DS-03 native cases, CA handoff and auth/TLS); static gate is still waiting on the exact TLS baseline build. Separate real-browser auth: 4 passkey scenarios + 2 recovery scenarios PASS.

Scale: real static shipping binary 20,064,880 bytes, SHA256 b887c4eace727fb3b98cf9570f528c1d1a4a2f80f2d7915cc7cbe7a0e6e54318, recovered 200 simultaneous real shims, admitted 201, after reap 200. 101 facts reads: p50 3.407 ms, maximum 12.664 ms. infraternal-dev/8 CPUs/CPUWeight=10000, local RTT=0; load 14.95/20.68/25.35 ->16.80/20.96/25.41, overlapping own TLS baseline compilation. Timing is a loaded-host diagnostic, not a causal delta. No memory claim: facts-only avoids protected smaps. Evidence: evidence/prod-batch/protected-scale.log (staged after code commits).

Protected-shim compatibility fix passed the full workspace tests (including SB-01, retention, 5 DS-03 native cases, CA handoff and auth/TLS); static gate is still waiting on the exact TLS baseline build. Separate real-browser auth: 4 passkey scenarios + 2 recovery scenarios PASS. Scale: real static shipping binary 20,064,880 bytes, SHA256 b887c4eace727fb3b98cf9570f528c1d1a4a2f80f2d7915cc7cbe7a0e6e54318, recovered 200 simultaneous real shims, admitted 201, after reap 200. 101 facts reads: p50 3.407 ms, maximum 12.664 ms. infraternal-dev/8 CPUs/CPUWeight=10000, local RTT=0; load 14.95/20.68/25.35 ->16.80/20.96/25.41, overlapping own TLS baseline compilation. Timing is a loaded-host diagnostic, not a causal delta. No memory claim: facts-only avoids protected smaps. Evidence: evidence/prod-batch/protected-scale.log (staged after code commits).

kayg commented 2026-10-11 08:16:44 +00:00

Author

Owner

Copy link

Exact TLS baseline attempt hit a Cargo cache reuse problem: git-archive source mtimes predate the merged build, so its reused binary build-script executable emitted the CA handoff linker-script flag into the TLS checkout, which has no handoff-note.ld. Link failed; no baseline artifact was accepted. Refreshed only the temporary checkout's file mtimes to force rebuilding its own workspace sources/build scripts; retry queued. Failed output will be preserved in evidence/prod-batch/baseline-cache-failure.log. Production tests all pass; current static build is proceeding separately. No source or release-profile workaround.

Exact TLS baseline attempt hit a Cargo cache reuse problem: git-archive source mtimes predate the merged build, so its reused binary build-script executable emitted the CA handoff linker-script flag into the TLS checkout, which has no handoff-note.ld. Link failed; no baseline artifact was accepted. Refreshed only the temporary checkout's file mtimes to force rebuilding its own workspace sources/build scripts; retry queued. Failed output will be preserved in evidence/prod-batch/baseline-cache-failure.log. Production tests all pass; current static build is proceeding separately. No source or release-profile workaround.

kayg referenced this issue from a commit 2026-10-11 08:38:15 +00:00

fix(agent): retain protected shim lifetimes in session counts

kayg commented 2026-10-11 08:38:46 +00:00

Author

Owner

Copy link

Completed protected-shim compatibility step: b67d034556, pushed prod-batch. Session registry now lstat-checks /proc/PID/exe without weakening dumpability, birth ticks or PID-reuse checks. SB-01/retention share exact-private-path kernel socket observation. Regression: 0/1 before, 4/0 lifecycle after; full workspace tests PASS. At 200 simultaneous shims: recovered200/admitted201/reaped200, 101 facts reads p50 3.407ms/max12.664ms (loaded-host conditions recorded separately). No extra session state/timers/dependencies.

Exact TLS baseline fresh build: 19,991,456 bytes. This step: 20,064,880 bytes, +73,424. Static PIE, no PT_INTERP. Fixed build-cache flags; the only gate exception is the unchanged D205 size ceiling. scripts/verify fast output, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

How to test: run scripts/verify fast with an isolated Cargo target and TRACER_TEST_PORT=5799. Observe protected process remains counted, then disappears after reap. SB-01 and retention must detach uncredited output and preserve final status.

Completed protected-shim compatibility step: b67d0345564292e4963b49d11c047ceda8a5d5d1, pushed prod-batch. Session registry now lstat-checks /proc/PID/exe without weakening dumpability, birth ticks or PID-reuse checks. SB-01/retention share exact-private-path kernel socket observation. Regression: 0/1 before, 4/0 lifecycle after; full workspace tests PASS. At 200 simultaneous shims: recovered200/admitted201/reaped200, 101 facts reads p50 3.407ms/max12.664ms (loaded-host conditions recorded separately). No extra session state/timers/dependencies. Exact TLS baseline fresh build: 19,991,456 bytes. This step: 20,064,880 bytes, +73,424. Static PIE, no PT_INTERP. Fixed build-cache flags; the only gate exception is the unchanged D205 size ceiling. scripts/verify fast output, verbatim: ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` How to test: run scripts/verify fast with an isolated Cargo target and TRACER_TEST_PORT=5799. Observe protected process remains counted, then disappears after reap. SB-01 and retention must detach uncredited output and preserve final status.

kayg commented 2026-10-11 08:54:18 +00:00

Author

Owner

Copy link

Double-fork fix gate hit one server test failure: auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit, line49, initial event type "error" vs "snapshot" (290 PASS/1 FAIL/32 ignored). Isolated same merged binary retry PASS in9.28s. No timeout or production auth change; no #118 baseline waiver claimed. Fresh full gate running before commit. Failed transcript: evidence/prod-batch/fast-detach.log; retry: liveness-retry.log.

Static build succeeds: 20,064,944 bytes, no PT_INTERP; +64 vs protected-shim step and +73,488 vs fresh exact TLS baseline19,991,456. Unchanged D205 ceiling16,404,816 exceeded; this is distinct from the test failure.

Double-fork fix gate hit one server test failure: auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit, line49, initial event type "error" vs "snapshot" (290 PASS/1 FAIL/32 ignored). Isolated same merged binary retry PASS in9.28s. No timeout or production auth change; no #118 baseline waiver claimed. Fresh full gate running before commit. Failed transcript: evidence/prod-batch/fast-detach.log; retry: liveness-retry.log. Static build succeeds: 20,064,944 bytes, no PT_INTERP; +64 vs protected-shim step and +73,488 vs fresh exact TLS baseline19,991,456. Unchanged D205 ceiling16,404,816 exceeded; this is distinct from the test failure.

kayg commented 2026-10-11 09:12:07 +00:00

Author

Owner

Copy link

Full rerun passed the previously failing liveness test, then failed auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket: 10,000 nodes/30,000 grants, snapshot64,595 bytes, liveness resync64,602 bytes, then unexpected websocket close. Load at its measurement9.36/10.52/13.87. Full server290PASS/1FAIL/32ignored. No source timeout changes or exception accepted yet.

Preparing detached dev baseline5bc58323ab14a99613df16c1dbe254e99bda3d28 in this job's baseline directory and a separate warmed dev-target, then compare both binaries in the same load window under CPUWeight10000 (#118). Both failing test source files are byte-identical to origin/dev. Current detach binary separately PASS2/0 in2.62s (signal regression plus all seven closed-stdio cases). Evidence: fast-final-clean.log, detach-current.log; baseline comparison pending.

Full rerun passed the previously failing liveness test, then failed auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket: 10,000 nodes/30,000 grants, snapshot64,595 bytes, liveness resync64,602 bytes, then unexpected websocket close. Load at its measurement9.36/10.52/13.87. Full server290PASS/1FAIL/32ignored. No source timeout changes or exception accepted yet. Preparing detached dev baseline5bc58323ab14a99613df16c1dbe254e99bda3d28 in this job's baseline directory and a separate warmed dev-target, then compare both binaries in the same load window under CPUWeight10000 (#118). Both failing test source files are byte-identical to origin/dev. Current detach binary separately PASS2/0 in2.62s (signal regression plus all seven closed-stdio cases). Evidence: fast-final-clean.log, detach-current.log; baseline comparison pending.

kayg commented 2026-10-11 09:25:18 +00:00

Author

Owner

Copy link

Detached dev baseline5bc58323ab14a99613df16c1dbe254e99bda3d28 and merged binary tested together under one CPUWeight10000 scope/default300ms RTT. Both unchanged socket cases PASS on both trees. Liveness:9.54s each. Headroom:dev77.75s/merged79.50s, both assembled10,000 nodes/30,000 grants across88 pages, max frame64,612 bytes, liveness resync then shared-socket Pong. Load21.22/17.12/15.96 ->24.03/20.18/17.21; comparison overlapped non-server compilation. No matching baseline failure, therefore no #118 waiver accepted.

The separate exclude-server workspace run failed terminal.open with resource_unavailable after the initial live session exited. Isolated same binary retry PASS41.44s, all24 abrupt stops and4,710,396 payload bytes exact. No timeout changes or production workaround. Fresh full scripts/verify fast running with no other own build/test activity. Both failed transcripts and retries are preserved in evidence/prod-batch/.

Detached dev baseline5bc58323ab14a99613df16c1dbe254e99bda3d28 and merged binary tested together under one CPUWeight10000 scope/default300ms RTT. Both unchanged socket cases PASS on both trees. Liveness:9.54s each. Headroom:dev77.75s/merged79.50s, both assembled10,000 nodes/30,000 grants across88 pages, max frame64,612 bytes, liveness resync then shared-socket Pong. Load21.22/17.12/15.96 ->24.03/20.18/17.21; comparison overlapped non-server compilation. No matching baseline failure, therefore no #118 waiver accepted. The separate exclude-server workspace run failed terminal.open with resource_unavailable after the initial live session exited. Isolated same binary retry PASS41.44s, all24 abrupt stops and4,710,396 payload bytes exact. No timeout changes or production workaround. Fresh full scripts/verify fast running with no other own build/test activity. Both failed transcripts and retries are preserved in evidence/prod-batch/.

kayg referenced this issue from a commit 2026-10-11 09:36:49 +00:00

fix(shim): reset inherited signals in both detached children

kayg commented 2026-10-11 09:38:48 +00:00

Author

Owner

Copy link

Completed child-signal step: 431ec8a743, pushed prod-batch. Both raw double-fork children call the existing audited reset_child_signals helper; parent reload mask/dispositions preserved. Regression0/1 before,2/0 after, all seven closed-stdio masks preserved. Existing SSH-helper and embedded-child mask regressions PASS. Shared-host200-launch measurement recorded earlier: observed+218.854us/launch, +43.771ms/200, no persistent reset state.

Final complete workspace tests PASS, including server291/0/32ignored, shim65/0/13ignored, detach2/0; SB-01, retention, five DS-03 cases, ordinary CA handoff and native/proxy TLS all PASS. Both intermittent socket failures passed this complete run without timeout changes or a baseline waiver. Detached dev/merged comparisons passed both cases; failed attempts and retries are preserved.

Static20,064,944 bytes, no PT_INTERP; fresh exact origin/tls-session-prod19,991,456 =>+73,488 bytes (+64 for this signal fix). Unchanged D205 ceiling16,404,816 is the sole failing row. scripts/verify fast output, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

How to test: run scripts/verify fast with TRACER_TEST_PORT=5799 and a Cargo target isolated from other checkouts. The real detach signal test must report an empty mask and SIGHUP termination without changing the parent. Existing closed-stdio, credit, session-bounds and TLS tests must still pass.

Completed child-signal step: 431ec8a743427a40b7509cd32d7fe712be6eca80, pushed prod-batch. Both raw double-fork children call the existing audited reset_child_signals helper; parent reload mask/dispositions preserved. Regression0/1 before,2/0 after, all seven closed-stdio masks preserved. Existing SSH-helper and embedded-child mask regressions PASS. Shared-host200-launch measurement recorded earlier: observed+218.854us/launch, +43.771ms/200, no persistent reset state. Final complete workspace tests PASS, including server291/0/32ignored, shim65/0/13ignored, detach2/0; SB-01, retention, five DS-03 cases, ordinary CA handoff and native/proxy TLS all PASS. Both intermittent socket failures passed this complete run without timeout changes or a baseline waiver. Detached dev/merged comparisons passed both cases; failed attempts and retries are preserved. Static20,064,944 bytes, no PT_INTERP; fresh exact origin/tls-session-prod19,991,456 =>+73,488 bytes (+64 for this signal fix). Unchanged D205 ceiling16,404,816 is the sole failing row. scripts/verify fast output, verbatim: ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` How to test: run scripts/verify fast with TRACER_TEST_PORT=5799 and a Cargo target isolated from other checkouts. The real detach signal test must report an empty mask and SIGHUP termination without changing the parent. Existing closed-stdio, credit, session-bounds and TLS tests must still pass.

kayg referenced this issue from a commit 2026-10-11 09:52:32 +00:00

docs(evidence): record production batch audit and merged-tree gates

kayg commented 2026-10-11 09:56:37 +00:00

Author

Owner

Copy link

Finished production batch verification. Head 0c9d3b6158, branch prod-batch, pushed after each atomic commit; worktree clean. No deployment; issues remain open.

Commits: b67d0345 protected-shim lifetime/counting plus compatible SB-01/retention observers; 431ec8a7 shared default signal reset at both raw-fork child branches plus real regression; 0c9d3b61 audit, author checklist, transcripts, numbers and production screenshots. Both bugs have failing-before tests. Every production child-launch site is covered by prepare_child/prepare_spawn or their shared raw-fork reset; same-PID fexecve intentionally retains reload policy.

scripts/verify fast completed on the exact final source code (evidence-only final commit). Output verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Only D205's known unchanged binary-size ceiling fails: x86 static PIE/no PT_INTERP20,064,944 bytes vs ceiling16,404,816; fresh exact origin/tls-session-prod5d02b8d6 build19,991,456 =>+73,488 bytes, +64 for signal fix. No budget/profile changes. ARM is not reached after the x86 ceiling; no ARM claim.

All workspace tests PASS: server291/0/32existing ignored diagnostics, shim65/0/13ignored, detach2/0; ordinary CA handoff, SB-01, retention, DS-03's five real native cases and auth/native+proxy TLS pass. Prior socket and terminal-open failures are preserved; isolated retries and final full gate pass. Detached dev5bc58323 and merged paired socket tests both pass in the same loaded window, so no #118 waiver was used. Explicit ignored warm shipping-restart/128-PTY benchmark not rerun: harness writes the separate ca-handoff job scratch directory outside this brief's scope; prior reviewed evidence remains, no new warm-shipping claim.

Tracer check PASS; src142tests/10,901 assertions PASS; production build+all D188/font budgets PASS; DS-02 transfer review PASS; 7 Playwright tests PASS (dead-session4, detached-output1, transient retry/input2), TRACER_TEST_PORT5799/default300ms. Supplemental standard TS fast PASS, 36protocol tests/34,462 assertions. Real-browser auth PASS4passkey+2recovery scenarios (Chromium149.0.7827.55).

Final-head frontend budget output verbatim:

JavaScript transfer, critical: identity=937443 gzip=290390/307200 brotli=241119/256000 bytes
JavaScript transfer, deferred: identity=143681 gzip=50712/51200 brotli=44677/45056 bytes
JavaScript transfer, onDemand largest chunk chunk-kdfktscv.js: gzip=14998/20480 brotli=13322/18432 bytes (class total gzip=66180 brotli=58765, not limited)
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

Scale: final shipping binarySHA256a265bc649927e8b7654228a30a705fec3a839aa1e4c7f7fbc67a31ece9c27beb; 200 simultaneous real shims recovered,201admitted,200after extra reap. 101facts reads p50 4.706ms/max14.941ms, localRTT0/80x24/infraternal-dev8CPUs/CPUWeight10000, no other own build/test overlap; load14.20/22.66/21.65 ->16.03/22.90/21.73. Fork benchmark:7 alternating 200-launch GNU debug batches, observed+218.854us/launch/+43.771ms per200; shared-host timing limits recorded, no added persistent reset/registry state, no total RSS/PSS claim.

Evidence and required author review: evidence/prod-batch/README.md, reviewer-checklist.md, binary-final.txt, fast-complete.log, final-scale.log, detach-cost.log, screenshots/*.png. Final frontend head budget is recorded above because the evidence-only commit changes build revision metadata. Own temporary targets, artifacts and detached checkouts are being removed after recording this finish; committed evidence is retained.

Finished production batch verification. Head 0c9d3b615894c75c6158c6664eb6d4aa0d42b57d, branch prod-batch, pushed after each atomic commit; worktree clean. No deployment; issues remain open. Commits: b67d0345 protected-shim lifetime/counting plus compatible SB-01/retention observers; 431ec8a7 shared default signal reset at both raw-fork child branches plus real regression; 0c9d3b61 audit, author checklist, transcripts, numbers and production screenshots. Both bugs have failing-before tests. Every production child-launch site is covered by prepare_child/prepare_spawn or their shared raw-fork reset; same-PID fexecve intentionally retains reload policy. scripts/verify fast completed on the exact final source code (evidence-only final commit). Output verbatim: ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Only D205's known unchanged binary-size ceiling fails: x86 static PIE/no PT_INTERP20,064,944 bytes vs ceiling16,404,816; fresh exact origin/tls-session-prod5d02b8d6 build19,991,456 =>+73,488 bytes, +64 for signal fix. No budget/profile changes. ARM is not reached after the x86 ceiling; no ARM claim. All workspace tests PASS: server291/0/32existing ignored diagnostics, shim65/0/13ignored, detach2/0; ordinary CA handoff, SB-01, retention, DS-03's five real native cases and auth/native+proxy TLS pass. Prior socket and terminal-open failures are preserved; isolated retries and final full gate pass. Detached dev5bc58323 and merged paired socket tests both pass in the same loaded window, so no #118 waiver was used. Explicit ignored warm shipping-restart/128-PTY benchmark not rerun: harness writes the separate ca-handoff job scratch directory outside this brief's scope; prior reviewed evidence remains, no new warm-shipping claim. Tracer check PASS; src142tests/10,901 assertions PASS; production build+all D188/font budgets PASS; DS-02 transfer review PASS; 7 Playwright tests PASS (dead-session4, detached-output1, transient retry/input2), TRACER_TEST_PORT5799/default300ms. Supplemental standard TS fast PASS, 36protocol tests/34,462 assertions. Real-browser auth PASS4passkey+2recovery scenarios (Chromium149.0.7827.55). Final-head frontend budget output verbatim: ``` JavaScript transfer, critical: identity=937443 gzip=290390/307200 brotli=241119/256000 bytes JavaScript transfer, deferred: identity=143681 gzip=50712/51200 brotli=44677/45056 bytes JavaScript transfer, onDemand largest chunk chunk-kdfktscv.js: gzip=14998/20480 brotli=13322/18432 bytes (class total gzip=66180 brotli=58765, not limited) Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ``` Scale: final shipping binarySHA256a265bc649927e8b7654228a30a705fec3a839aa1e4c7f7fbc67a31ece9c27beb; 200 simultaneous real shims recovered,201admitted,200after extra reap. 101facts reads p50 4.706ms/max14.941ms, localRTT0/80x24/infraternal-dev8CPUs/CPUWeight10000, no other own build/test overlap; load14.20/22.66/21.65 ->16.03/22.90/21.73. Fork benchmark:7 alternating 200-launch GNU debug batches, observed+218.854us/launch/+43.771ms per200; shared-host timing limits recorded, no added persistent reset/registry state, no total RSS/PSS claim. Evidence and required author review: evidence/prod-batch/README.md, reviewer-checklist.md, binary-final.txt, fast-complete.log, final-scale.log, detach-cost.log, screenshots/*.png. Final frontend head budget is recorded above because the evidence-only commit changes build revision metadata. Own temporary targets, artifacts and detached checkouts are being removed after recording this finish; committed evidence is retained.

kayg commented 2026-10-11 10:02:39 +00:00

Author

Owner

Copy link

Cleanup complete at 0c9d3b6158: own prod-batch/pb scratch roots, build targets, binary artifacts and detached baseline checkouts removed. Committed evidence retained. Worktree clean; local HEAD equals origin/prod-batch. Final-head production build and every D188/font budget pass; finish SHA and full gate output are in the preceding comment. No deployment or issue closure.

Cleanup complete at 0c9d3b615894c75c6158c6664eb6d4aa0d42b57d: own prod-batch/pb scratch roots, build targets, binary artifacts and detached baseline checkouts removed. Committed evidence retained. Worktree clean; local HEAD equals origin/prod-batch. Final-head production build and every D188/font budget pass; finish SHA and full gate output are in the preceding comment. No deployment or issue closure.

kayg commented 2026-10-11 10:15:47 +00:00

Author

Owner

Copy link

Orchestrator: batch verification finished at 0c9d3b61 (shim signal reset in both detached children, protected-shim session counting). Merged origin/ui-inbox (machine sections, CA unlock, inbox) → 707a4572, pushed.

Merged-tree gates:

• bun run check: pass
• bun test src: 147 pass, 0 fail
• Playwright ca-unlock, inbox, machine-sections, addhost-wizard: 47 passed (8.9m)
• transfer budget (production build): critical gzip 291613/307200, deferred 48184/51200, largest on-demand chunk 15015/20480 — pass
• Rust gates (job): fmt/clippy/test/deny pass; static size ceiling over by 73,488 B (known)

Static x86_64 + aarch64 builds running; deploy follows.

Orchestrator: batch verification finished at `0c9d3b61` (shim signal reset in both detached children, protected-shim session counting). Merged `origin/ui-inbox` (machine sections, CA unlock, inbox) → `707a4572`, pushed. Merged-tree gates: - `bun run check`: pass - `bun test src`: 147 pass, 0 fail - Playwright ca-unlock, inbox, machine-sections, addhost-wizard: 47 passed (8.9m) - transfer budget (production build): critical gzip 291613/307200, deferred 48184/51200, largest on-demand chunk 15015/20480 — pass - Rust gates (job): fmt/clippy/test/deny pass; static size ceiling over by 73,488 B (known) Static x86_64 + aarch64 builds running; deploy follows.

kayg referenced this issue from a commit 2026-10-11 10:57:07 +00:00

Merge prod-batch into release-prod-2: deployed 707a4572 (#151 #149 #154, machine sections, CA unlock, inbox)

kayg commented 2026-10-11 10:57:15 +00:00

Author

Owner

Copy link

Orchestrator: deployed 707a4572 to production (backup /var/backups/infraternal/20261011-125449-707a4572). Static x86_64 20,064,944 B, aarch64 17,884,216 B. infraternal-server active, NRestarts=0, no warnings since start; the protected shim kept the running session across the restart; server_ca_startup outcome="cold" (CA locked, awaiting the owner's unlock from the new sign-in toast / inbox). release-prod-2 now at 6320f5b5 (merge of the batch; tree identical to the deployed one).

Next (owner rule from 2026-10-11): after the owner unlocks, audit (1) the CA stays unlocked with no leak and (2) update signature verification.

Orchestrator: deployed `707a4572` to production (backup `/var/backups/infraternal/20261011-125449-707a4572`). Static x86_64 20,064,944 B, aarch64 17,884,216 B. `infraternal-server` active, NRestarts=0, no warnings since start; the protected shim kept the running session across the restart; `server_ca_startup outcome="cold"` (CA locked, awaiting the owner's unlock from the new sign-in toast / inbox). `release-prod-2` now at 6320f5b5 (merge of the batch; tree identical to the deployed one). Next (owner rule from 2026-10-11): after the owner unlocks, audit (1) the CA stays unlocked with no leak and (2) update signature verification.

kayg commented 2026-10-11 12:49:39 +00:00

Author

Owner

Copy link

Orchestrator: owner reports the CA unlocked (2026-10-11). Live checks on production (pid 157470, started 12:26:13 UTC): core limit 0, fs.suid_dumpable=0, no swap, VmSwap 0, environ has no secret variables (LANG PATH USER INVOCATION_ID JOURNAL_STREAM SYSTEMD_EXEC_PID MEMORY_PRESSURE_*), argv has no secrets, only child is the embedded agent (--fd 3). Finding: the unlock leaves no journal event, so custody cannot be confirmed from logs. Finding (orchestrator ops): deploy-prod.sh restarted the server on web-only deploys at 12:07 and 12:26 UTC, re-locking the CA; fixed (web-only now swaps the directory live, no restart). Audit job audit-ca-update launched on release-prod-2 15d15c25 for CA custody + update signature verification.

Orchestrator: owner reports the CA unlocked (2026-10-11). Live checks on production (pid 157470, started 12:26:13 UTC): core limit 0, fs.suid_dumpable=0, no swap, VmSwap 0, environ has no secret variables (LANG PATH USER INVOCATION_ID JOURNAL_STREAM SYSTEMD_EXEC_PID MEMORY_PRESSURE_*), argv has no secrets, only child is the embedded agent (--fd 3). Finding: the unlock leaves no journal event, so custody cannot be confirmed from logs. Finding (orchestrator ops): deploy-prod.sh restarted the server on web-only deploys at 12:07 and 12:26 UTC, re-locking the CA; fixed (web-only now swaps the directory live, no restart). Audit job `audit-ca-update` launched on release-prod-2 15d15c25 for CA custody + update signature verification.

kayg referenced this issue from a commit 2026-10-11 12:50:10 +00:00

Merge production into dev while retaining plugin-driven CLI (#163)

kayg commented 2026-10-11 12:58:01 +00:00

Author

Owner

Copy link

Starting post-unlock defensive audit on audit-ca-update, base 15d15c257c (production pin). Read all #154 comments; original scope has no linked parent. Continuing existing handoff findings; only production-code change authorized is an unlock audit event. Pinned tree lacks apps/release-signer and newer DECISIONS entries; will distinguish absent signed-update implementation from tested refusal properties. No production access or deployment.

Starting post-unlock defensive audit on audit-ca-update, base 15d15c257c6985c838b41f6db5216b6544f60bd0 (production pin). Read all #154 comments; original scope has no linked parent. Continuing existing handoff findings; only production-code change authorized is an unlock audit event. Pinned tree lacks apps/release-signer and newer DECISIONS entries; will distinguish absent signed-update implementation from tested refusal properties. No production access or deployment.

kayg commented 2026-10-11 13:13:08 +00:00

Author

Owner

Copy link

Supplemental signer audit (absent from production pin): local origin/dev c0239ad6f2, apps/release-signer/src/index.js:86-117. SIG-01 P1: missing VERSION and stable request with edge VERSION both return HTTP200, failing refusal tests. SIG-02 P2: newline flat filename accepted/signed, ambiguous SUMS framing. Real Worker SSHSIG coverage PASS: altered SUMS/other key refused, VERSION hash covered when present. Ephemeral in-memory keys/storage only. Evidence signer-*.txt and reproducible hash-pinned harness in docs/verification/ca-update-audit; README appended. Client must validate signed identity/channel independently. No production change.

Supplemental signer audit (absent from production pin): local origin/dev c0239ad6f24f921072dbca2829506ea5e65f8629, apps/release-signer/src/index.js:86-117. SIG-01 P1: missing VERSION and stable request with edge VERSION both return HTTP200, failing refusal tests. SIG-02 P2: newline flat filename accepted/signed, ambiguous SUMS framing. Real Worker SSHSIG coverage PASS: altered SUMS/other key refused, VERSION hash covered when present. Ephemeral in-memory keys/storage only. Evidence signer-*.txt and reproducible hash-pinned harness in docs/verification/ca-update-audit; README appended. Client must validate signed identity/channel independently. No production change.

kayg commented 2026-10-11 13:16:19 +00:00

Author

Owner

Copy link

Proposed additive unlock audit event (authorized brief, D168/#154): instrument CaAdministration::finish only. One server_ca_unlock event per completed parsed authority attempt, including bound requesting user ID when known, current UTC Unix time and outcome. Early foreign/replayed attempts remain unattributed; no cookie hash, ceremony ID, proof, wrapped/unwrapped material or error diagnostics. Cancellation and an install followed by rollback-report failure must retain accurate custody outcomes. Existing bootstrap-to-unlock dispatch calls the same method. Syntax/header refusals stay empty HTTP errors. No new dependency, polling task or schema.

Proposed additive unlock audit event (authorized brief, D168/#154): instrument CaAdministration::finish only. One server_ca_unlock event per completed parsed authority attempt, including bound requesting user ID when known, current UTC Unix time and outcome. Early foreign/replayed attempts remain unattributed; no cookie hash, ceremony ID, proof, wrapped/unwrapped material or error diagnostics. Cancellation and an install followed by rollback-report failure must retain accurate custody outcomes. Existing bootstrap-to-unlock dispatch calls the same method. Syntax/header refusals stay empty HTTP errors. No new dependency, polling task or schema.

kayg commented 2026-10-11 13:26:44 +00:00

Author

Owner

Copy link

Initial fast gate interrupted after two corrected test-only Clippy lints and replacement fixtures stalled. Evidence: shell umask002; Cargo test executables mode0775; replacement correctly refuses writable candidates. Rerun uses umask022 and owned target executables normalized to remove group/world write; no permission policy/production change. Dedicated audit: five unresolved security-property regressions plus missing unlock event fail as expected; real CA authority23 PASS and handoff7 PASS. Not a #118 load waiver.

Initial fast gate interrupted after two corrected test-only Clippy lints and replacement fixtures stalled. Evidence: shell umask002; Cargo test executables mode0775; replacement correctly refuses writable candidates. Rerun uses umask022 and owned target executables normalized to remove group/world write; no permission policy/production change. Dedicated audit: five unresolved security-property regressions plus missing unlock event fail as expected; real CA authority23 PASS and handoff7 PASS. Not a #118 load waiver.

kayg commented 2026-10-11 13:28:16 +00:00

Author

Owner

Copy link

CA-01 P2 ca.rs:67-69/ca_memory.rs:174-180: unlocked_signer_requires_persistent_locked_pages FAIL, isolated unlocked process VmLck0kB with dumpability disabled. Persistent OpenSSL key and export/decrypt heap copies not mlocked; no swap/core protections supplied for production mitigate exposure; no leak claimed. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

CA-01 P2 ca.rs:67-69/ca_memory.rs:174-180: unlocked_signer_requires_persistent_locked_pages FAIL, isolated unlocked process VmLck0kB with dumpability disabled. Persistent OpenSSL key and export/decrypt heap copies not mlocked; no swap/core protections supplied for production mitigate exposure; no leak claimed. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:28:17 +00:00

Author

Owner

Copy link

CA-02 P2 ca_administration.rs:301-304: unlock_audit_records_principal_time_outcome_without_material FAIL before, zero events expected3 for success/replay/decrypt refusal. Authorized additive content-free event follows in separate commit; proposal already recorded. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

CA-02 P2 ca_administration.rs:301-304: unlock_audit_records_principal_time_outcome_without_material FAIL before, zero events expected3 for success/replay/decrypt refusal. Authorized additive content-free event follows in separate commit; proposal already recorded. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:28:18 +00:00

Author

Owner

Copy link

CA-03 P2 ca_http.rs:71,113-125/runtime.rs:819-821: sequential_unlock_starts_require_a_temporal_budget FAIL,31 accepted starts in72ms. Concurrency/deadline/pending caps exist; no temporal per-principal budget. Authenticated-admin availability gap; proposed30/minute regression does not change contract. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

CA-03 P2 ca_http.rs:71,113-125/runtime.rs:819-821: sequential_unlock_starts_require_a_temporal_budget FAIL,31 accepted starts in72ms. Concurrency/deadline/pending caps exist; no temporal per-principal budget. Authenticated-admin availability gap; proposed30/minute regression does not change contract. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:28:19 +00:00

Author

Owner

Copy link

UP-01 P1 restart_binary.rs:95-97: unsigned_or_tampered_replacement_is_refused_before_exec FAIL,4/4 crafted unsigned/tampered/truncated/65MiB candidates admitted,0 executed. Real signature hook returnsOk; no release keys/version/channel/downgrade verification. Root/protected-parent warm eligibility remains; external verification only. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

UP-01 P1 restart_binary.rs:95-97: unsigned_or_tampered_replacement_is_refused_before_exec FAIL,4/4 crafted unsigned/tampered/truncated/65MiB candidates admitted,0 executed. Real signature hook returnsOk; no release keys/version/channel/downgrade verification. Root/protected-parent warm eligibility remains; external verification only. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:28:20 +00:00

Author

Owner

Copy link

UP-02 P2 restart_binary.rs:35,86/restart.rs:303: admitted_inode_cannot_change_in_place_before_execution FAIL, retained fd reads rewritten bytes. Pathname-replacement test PASS. Future verifier must also freeze/check content; no claim of bypassing currently implemented cryptography (UP-01). Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

UP-02 P2 restart_binary.rs:35,86/restart.rs:303: admitted_inode_cannot_change_in_place_before_execution FAIL, retained fd reads rewritten bytes. Pathname-replacement test PASS. Future verifier must also freeze/check content; no claim of bypassing currently implemented cryptography (UP-01). Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:28:21 +00:00

Author

Owner

Copy link

UP-03 P1 restart.rs:359-370: unusable_admitted_image_keeps_the_existing_service_running FAIL, empty admitted executable triggers exec refusal after runtime shutdown; existing listener is gone. Supervisor recovery is cold/locked. Violates owner failed-update continuity requirement; early refusal/reply-failure paths keep serving. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

UP-03 P1 restart.rs:359-370: unusable_admitted_image_keeps_the_existing_service_running FAIL, empty admitted executable triggers exec refusal after runtime shutdown; existing listener is gone. Supervisor recovery is cold/locked. Violates owner failed-update continuity requirement; early refusal/reply-failure paths keep serving. Evidence and test results appended to docs/verification/ca-update-audit/README.md; logs evidence/ca-update-audit/before-*.txt. No production fixes except upcoming unlock audit event.

kayg commented 2026-10-11 13:52:49 +00:00

Author

Owner

Copy link

Documentation step 2a4d07cc46: committed initial eight findings and coverage matrix in docs/verification/ca-update-audit/README.md, separating production pin from supplemental Worker revision. Initial full fast gate: fmt/VT fmt/clippy/test/deny PASS; known size-only FAIL. x86 static PIE/no PT_INTERP20064976B vs ceiling16404816; server296PASS/35ignored. Failing regressions and raw evidence are being committed in separate logical steps. No production change/deployment.

Documentation step 2a4d07cc4604b41725cbeeb3d220ef2f9ee79334: committed initial eight findings and coverage matrix in docs/verification/ca-update-audit/README.md, separating production pin from supplemental Worker revision. Initial full fast gate: fmt/VT fmt/clippy/test/deny PASS; known size-only FAIL. x86 static PIE/no PT_INTERP20064976B vs ceiling16404816; server296PASS/35ignored. Failing regressions and raw evidence are being committed in separate logical steps. No production change/deployment.

kayg commented 2026-10-11 13:58:13 +00:00

Author

Owner

Copy link

Completed separate test steps:
92c65f03 test: reproduce audit results and signer release identity gaps (#154)
3f14b5f4 test: preserve failing replacement verification and custody expectations (#154)
ef315d53 test: verify unlocked CA custody and authority boundaries (#154)
2a4d07cc docs: record pinned CA custody and release verification findings (#154)
Custody ordinary4PASS; authority24PASS with explicit unresolved ignores; handoff7PASS. Five unresolved production regressions and missing-event regression all FAIL as expected via fresh compiled runner. Baseline100 real unlocks/1000 memberships: finish wall p50=3556903ns,p99=8204650ns,processCPU p50=3805686ns,p99=6921201ns;0 audit events. infraternal-dev/8CPUs/CPUWeight10000, load6.90/14.64/20.30 ->8.20/14.31/20.04; no own build/browser overlap, GNUdebug formatting diagnostic, journal I/O excluded. Initial full fast Rust rows PASS except known static-size ceiling; fresh workspace no-run and Clippy PASS. No production fixes in these commits.

Completed separate test steps: 92c65f03 test: reproduce audit results and signer release identity gaps (#154) 3f14b5f4 test: preserve failing replacement verification and custody expectations (#154) ef315d53 test: verify unlocked CA custody and authority boundaries (#154) 2a4d07cc docs: record pinned CA custody and release verification findings (#154) Custody ordinary4PASS; authority24PASS with explicit unresolved ignores; handoff7PASS. Five unresolved production regressions and missing-event regression all FAIL as expected via fresh compiled runner. Baseline100 real unlocks/1000 memberships: finish wall p50=3556903ns,p99=8204650ns,processCPU p50=3805686ns,p99=6921201ns;0 audit events. infraternal-dev/8CPUs/CPUWeight10000, load6.90/14.64/20.30 ->8.20/14.31/20.04; no own build/browser overlap, GNUdebug formatting diagnostic, journal I/O excluded. Initial full fast Rust rows PASS except known static-size ceiling; fresh workspace no-run and Clippy PASS. No production fixes in these commits.

kayg commented 2026-10-11 14:27:57 +00:00

Author

Owner

Copy link

CA-02 red/green: real passkey/SQLite test failed with 0 events before; now passes 4 events (success, replay refusal, wrong wrap refusal, cancellation). Guard logs only server-attributed user/time/outcome and marks custody before rollback await. No authority change. 100 real unlocks at 1000 active administrator records: 100 events/26,800 formatted bytes; finish wall p50 3.557 -> 3.847 ms, p99 8.205 -> 9.963 ms. Shared-host load differs (before 6.90/14.64/20.30; after 18.56/27.23/23.88), so delta is diagnostic, not causal or a release-budget proof. Evidence: docs/verification/ca-update-audit/README.md and evidence/ca-update-audit/unlock-cost-{before,after}.txt. Fresh targeted suites and remote-disabled cargo check pass. Final fast gate reached static build after all other Rust rows passed; separate TypeScript gate passed. Logging commit awaits final gate evidence.

CA-02 red/green: real passkey/SQLite test failed with 0 events before; now passes 4 events (success, replay refusal, wrong wrap refusal, cancellation). Guard logs only server-attributed user/time/outcome and marks custody before rollback await. No authority change. 100 real unlocks at 1000 active administrator records: 100 events/26,800 formatted bytes; finish wall p50 3.557 -> 3.847 ms, p99 8.205 -> 9.963 ms. Shared-host load differs (before 6.90/14.64/20.30; after 18.56/27.23/23.88), so delta is diagnostic, not causal or a release-budget proof. Evidence: docs/verification/ca-update-audit/README.md and evidence/ca-update-audit/unlock-cost-{before,after}.txt. Fresh targeted suites and remote-disabled cargo check pass. Final fast gate reached static build after all other Rust rows passed; separate TypeScript gate passed. Logging commit awaits final gate evidence.

kayg commented 2026-10-11 14:32:26 +00:00

Author

Owner

Copy link

Post-logging fast gate: fmt/VT fmt/clippy/cargo-deny PASS; test row has one failure in auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity (296 PASS/1 FAIL/35 ignored). Pong while pending passed at 17 ms; queued Result was not ok after the fixture's 2-second freshness window. Initial full pre-logging gate passed this test. No assertion/timeout changes. Following #118: detached dev baseline ded3abd609 under job scratch, then same-load-window comparison and full rerun. Static size is known overrun: 20,067,504 vs 16,404,816 bytes; +2,528 bytes vs own pre-logging build 20,064,976. Evidence: evidence/ca-update-audit/fast-final.txt.

Post-logging fast gate: fmt/VT fmt/clippy/cargo-deny PASS; test row has one failure in auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity (296 PASS/1 FAIL/35 ignored). Pong while pending passed at 17 ms; queued Result was not ok after the fixture's 2-second freshness window. Initial full pre-logging gate passed this test. No assertion/timeout changes. Following #118: detached dev baseline ded3abd609e5290a7027b6888ecd9864a2d30374 under job scratch, then same-load-window comparison and full rerun. Static size is known overrun: 20,067,504 vs 16,404,816 bytes; +2,528 bytes vs own pre-logging build 20,064,976. Evidence: evidence/ca-update-audit/fast-final.txt.

kayg commented 2026-10-11 14:37:27 +00:00

Author

Owner

Copy link

#118 comparison completed: detached dev ded3abd6 and current audit branch both PASS the exact socket test in the same load window (2.031s vs 2.004s; control pong 1ms vs 2ms; load 24.64/28.41/29.30 ->25.55/28.53/29.33). Baseline did not reproduce the failure, so no #118 waiver is claimed. Full fast gate is rerunning with RUST_TEST_THREADS=1, unchanged assertions/deadlines. Evidence: evidence/ca-update-audit/socket-baseline-comparison.txt and fast-final-serial.txt.

#118 comparison completed: detached dev ded3abd6 and current audit branch both PASS the exact socket test in the same load window (2.031s vs 2.004s; control pong 1ms vs 2ms; load 24.64/28.41/29.30 ->25.55/28.53/29.33). Baseline did not reproduce the failure, so no #118 waiver is claimed. Full fast gate is rerunning with RUST_TEST_THREADS=1, unchanged assertions/deadlines. Evidence: evidence/ca-update-audit/socket-baseline-comparison.txt and fast-final-serial.txt.

kayg commented 2026-10-11 14:54:58 +00:00

Author

Owner

Copy link

Completed authorized unlock logging: 73965a488a. Real event regression FAIL before (0 events), PASS after (4 outcomes incl cancellation); existing authority unchanged. Final server suite 297 PASS/0 FAIL/35 ignored; remote-disabled check and separate TypeScript fast phase PASS (154 tracer/36 protocol). Static PIE/no PT_INTERP 20,067,504 bytes vs 16,404,816 ceiling; +2,528 bytes vs own before build. No waiver or ceiling change. Evidence: docs/verification/ca-update-audit/README.md; evidence/ca-update-audit/fast-final-rebuilt.txt. Verbatim fast output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed authorized unlock logging: 73965a488a159732e5e2630f9d5eb6ece7b1538b. Real event regression FAIL before (0 events), PASS after (4 outcomes incl cancellation); existing authority unchanged. Final server suite 297 PASS/0 FAIL/35 ignored; remote-disabled check and separate TypeScript fast phase PASS (154 tracer/36 protocol). Static PIE/no PT_INTERP 20,067,504 bytes vs 16,404,816 ceiling; +2,528 bytes vs own before build. No waiver or ceiling change. Evidence: docs/verification/ca-update-audit/README.md; evidence/ca-update-audit/fast-final-rebuilt.txt. Verbatim fast output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

docs: record pinned CA custody and release verification findings (#154)

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

test: verify unlocked CA custody and authority boundaries (#154)

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

test: preserve failing replacement verification and custody expectations (#154)

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

test: reproduce audit results and signer release identity gaps (#154)

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

server: audit CA unlock custody outcomes (#154)

kayg referenced this issue from a commit 2026-10-11 14:58:10 +00:00

docs: preserve final CA/update audit evidence and gate limits (#154)

kayg commented 2026-10-11 15:00:04 +00:00

Author

Owner

Copy link

Finished defensive audit on audit-ca-update, head 9bcd5d7966, pushed only that branch (6 atomic commits). Report/summary/checklist: docs/verification/ca-update-audit/README.md; transcripts: evidence/ca-update-audit/. CA-02 unlock event repaired in 73965a48 (real regression red before, green after; success/refusal/cancellation, no material). Five unresolved production properties and two supplemental newer Worker findings retain explicit failing tests; signature admission remains a no-op at the production pin. No P0 or observed production leak; no production access/deploy or other production fix.

Final scripts/verify fast exit 1 only for known static size: stripped x86 static PIE/no PT_INTERP 20,067,504 bytes vs 16,404,816 ceiling (+2,528 bytes vs own pre-logging build). Server 297 PASS/0 FAIL/35 ignored. Separate TypeScript phase PASS (154 tracer/36 protocol), remote-disabled check PASS. Initial socket failure and baseline/cache evidence retained; no #118 waiver. Verbatim final gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Reproduce: build fresh workspace test binaries with cargo test --locked --workspace --no-run using a dedicated job CARGO_TARGET_DIR and umask 022; run systemd-run --user --scope -p CPUWeight=10000 python3 docs/verification/ca-update-audit/run-audit.py --target --phase after; inspect expected FAIL transcripts and the repaired event PASS. Use unique TRACER_TEST_PORT=5854 and separate baseline targets. Before-state evidence is committed; the before runner applies to 92c65f03. Benchmark: 100 real unlocks/1000 active records, 268 B/event; wall p50 +0.290 ms on unequal shared-host load windows, not causal or budget certification. Only owned baseline/scratch targets removed after preserving evidence; clean worktree. Independent review/owner follow-up remains, issue left open.

Finished defensive audit on audit-ca-update, head 9bcd5d79660229388efc65511e945e555b853117, pushed only that branch (6 atomic commits). Report/summary/checklist: docs/verification/ca-update-audit/README.md; transcripts: evidence/ca-update-audit/. CA-02 unlock event repaired in 73965a48 (real regression red before, green after; success/refusal/cancellation, no material). Five unresolved production properties and two supplemental newer Worker findings retain explicit failing tests; signature admission remains a no-op at the production pin. No P0 or observed production leak; no production access/deploy or other production fix. Final scripts/verify fast exit 1 only for known static size: stripped x86 static PIE/no PT_INTERP 20,067,504 bytes vs 16,404,816 ceiling (+2,528 bytes vs own pre-logging build). Server 297 PASS/0 FAIL/35 ignored. Separate TypeScript phase PASS (154 tracer/36 protocol), remote-disabled check PASS. Initial socket failure and baseline/cache evidence retained; no #118 waiver. Verbatim final gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Reproduce: build fresh workspace test binaries with cargo test --locked --workspace --no-run using a dedicated job CARGO_TARGET_DIR and umask 022; run systemd-run --user --scope -p CPUWeight=10000 python3 docs/verification/ca-update-audit/run-audit.py --target <that target> --phase after; inspect expected FAIL transcripts and the repaired event PASS. Use unique TRACER_TEST_PORT=5854 and separate baseline targets. Before-state evidence is committed; the before runner applies to 92c65f03. Benchmark: 100 real unlocks/1000 active records, 268 B/event; wall p50 +0.290 ms on unequal shared-host load windows, not causal or budget certification. Only owned baseline/scratch targets removed after preserving evidence; clean worktree. Independent review/owner follow-up remains, issue left open.

kayg commented 2026-10-11 15:07:56 +00:00

Author

Owner

Copy link

Starting the authorized CA-01/CA-03 repairs on audit-ca-update, base/head 9bcd5d7966 (production audit pin). Read project contracts, audit README and all 121 #154 comments; no parent linked. Reuse OpenSSL secure heap and auth admission; retain cold-start/no-timer custody. Worker SIG-01/SIG-02 changes will use separate signer-hardening from origin/dev. UP-01/02/03 stay deferred with precise implementation notes. No deployment or production access. Evidence: evidence/ca-update-hardening/ and audit README.

Starting the authorized CA-01/CA-03 repairs on audit-ca-update, base/head 9bcd5d79660229388efc65511e945e555b853117 (production audit pin). Read project contracts, audit README and all 121 #154 comments; no parent linked. Reuse OpenSSL secure heap and auth admission; retain cold-start/no-timer custody. Worker SIG-01/SIG-02 changes will use separate signer-hardening from origin/dev. UP-01/02/03 stay deferred with precise implementation notes. No deployment or production access. Evidence: evidence/ca-update-hardening/ and audit README.

kayg commented 2026-10-11 15:16:10 +00:00

Author

Owner

Copy link

Worker lane started on signer-hardening from origin/dev ded3abd609. Read its CLAUDE.md, DECISIONS.md, architecture/process; no Worker test harness existed. SIG-01 reproductions next to the Worker: missing/mismatched VERSION HTTP200 before, no signed identity manifest. Canonical additive format proposed: MANIFEST with LF-only format/version/channel lines followed by exact SHA256SUMS, plus MANIFEST.sig in existing SSHSIG namespace. Keep SHA256SUMS and its signature for existing operator verification; new consumers must require MANIFEST identity/channel and VERSION hashes. Reject unsafe names rather than skip them. Owner deploys manually; this job never deploys.

Worker lane started on signer-hardening from origin/dev ded3abd609e5290a7027b6888ecd9864a2d30374. Read its CLAUDE.md, DECISIONS.md, architecture/process; no Worker test harness existed. SIG-01 reproductions next to the Worker: missing/mismatched VERSION HTTP200 before, no signed identity manifest. Canonical additive format proposed: MANIFEST with LF-only format/version/channel lines followed by exact SHA256SUMS, plus MANIFEST.sig in existing SSHSIG namespace. Keep SHA256SUMS and its signature for existing operator verification; new consumers must require MANIFEST identity/channel and VERSION hashes. Reject unsafe names rather than skip them. Owner deploys manually; this job never deploys.

kayg commented 2026-10-11 15:20:52 +00:00

Author

Owner

Copy link

CA-01 implementation detail: extend existing exclusive LockedBytes storage ceiling from 4096 to 32768 for the already-bounded HTTP unlock/bootstrap intake; handoff frame remains independently bounded at 2090 bytes. Stream body chunks directly into that mapping after auth/admission; parsed scoped_key remains Zeroizing and body mapping drops before authority awaits. Add Send only for exclusive ownership transfer, no Sync. This reuses audited mmap/mlock/MADV_DONTDUMP rather than introducing a movable heap copy or another allocator. HTTP peak: 32 KiB x 8 admitted bodies = 256 KiB per server, plus process secure heap. No new parser or protocol.

CA-01 implementation detail: extend existing exclusive LockedBytes storage ceiling from 4096 to 32768 for the already-bounded HTTP unlock/bootstrap intake; handoff frame remains independently bounded at 2090 bytes. Stream body chunks directly into that mapping after auth/admission; parsed scoped_key remains Zeroizing and body mapping drops before authority awaits. Add Send only for exclusive ownership transfer, no Sync. This reuses audited mmap/mlock/MADV_DONTDUMP rather than introducing a movable heap copy or another allocator. HTTP peak: 32 KiB x 8 admitted bodies = 256 KiB per server, plus process secure heap. No new parser or protocol.

kayg commented 2026-10-11 15:43:43 +00:00

Author

Owner

Copy link

Fresh before-state regressions reproduced from the dependency-only workspace build (production behavior unchanged): CA-01 unlocked_signer_requires_persistent_locked_pages FAIL, VmLck=0 KiB for one synthetic unlocked signer. CA-03 sequential_unlock_starts_require_a_temporal_budget FAIL,31/31 starts accepted in98ms. Evidence: evidence/ca-update-hardening/before-{unlocked_signer_requires_persistent_locked_pages,sequential_unlock_starts_require_a_temporal_budget}.txt. Tests use real OpenSSL and passkey/SQLite authority; no production state or key inspection. Current gate is still running; no completed gate claim.

Fresh before-state regressions reproduced from the dependency-only workspace build (production behavior unchanged): CA-01 unlocked_signer_requires_persistent_locked_pages FAIL, VmLck=0 KiB for one synthetic unlocked signer. CA-03 sequential_unlock_starts_require_a_temporal_budget FAIL,31/31 starts accepted in98ms. Evidence: evidence/ca-update-hardening/before-{unlocked_signer_requires_persistent_locked_pages,sequential_unlock_starts_require_a_temporal_budget}.txt. Tests use real OpenSSL and passkey/SQLite authority; no production state or key inspection. Current gate is still running; no completed gate claim.

kayg commented 2026-10-11 15:55:43 +00:00

Author

Owner

Copy link

Completed CA-01 prerequisite cadac1dd: optional direct reuse of the already pinned OpenSSL at the D40 audited shim FFI boundary, enabled only with remote ca-handoff. No dependency versions or active production behavior changed. Fresh gate: server297 PASS/0 FAIL/35 ignored; static20067504B vs16404816 ceiling, delta0B vs9bcd5d79. Initial missing-lock-entry gate was retained; fixed-lockfile full rerun passes every non-size row. Evidence: dependency-fast*.txt. Verbatim scripts/verify fast summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Completed CA-01 prerequisite cadac1dd: optional direct reuse of the already pinned OpenSSL at the D40 audited shim FFI boundary, enabled only with remote ca-handoff. No dependency versions or active production behavior changed. Fresh gate: server297 PASS/0 FAIL/35 ignored; static20067504B vs16404816 ceiling, delta0B vs9bcd5d79. Initial missing-lock-entry gate was retained; fixed-lockfile full rerun passes every non-size row. Evidence: dependency-fast*.txt. Verbatim scripts/verify fast summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 16:04:19 +00:00

Author

Owner

Copy link

Worker gate setup/base correction: first dev gate failed the unchanged terminal restart fixture at iteration22 with terminal command queue full; second passed that test but failed initial_attach because its ignored target/ fixture parent was absent. No waiver or fixture/code changes. Created only the ignored target/ directory; build output stays in the dedicated scratch target. Shared origin/dev is now50a89572 (production backmerge); signer-hardening was moved from the older ded3abd6 ref to50a89572 before any fix commit, preserving the Worker patch/tests. The upstream Worker is byte-identical across these bases. Read the updated dev contracts; current-dev full gate is running. SIG-01 real Worker tests pass8/8. Evidence: evidence/signer-hardening/sig01-{fast,fast-retry,current-dev-fast,current-dev-tests}.txt. No deployment.

Worker gate setup/base correction: first dev gate failed the unchanged terminal restart fixture at iteration22 with terminal command queue full; second passed that test but failed initial_attach because its ignored target/ fixture parent was absent. No waiver or fixture/code changes. Created only the ignored target/ directory; build output stays in the dedicated scratch target. Shared origin/dev is now50a89572 (production backmerge); signer-hardening was moved from the older ded3abd6 ref to50a89572 before any fix commit, preserving the Worker patch/tests. The upstream Worker is byte-identical across these bases. Read the updated dev contracts; current-dev full gate is running. SIG-01 real Worker tests pass8/8. Evidence: evidence/signer-hardening/sig01-{fast,fast-retry,current-dev-fast,current-dev-tests}.txt. No deployment.

kayg commented 2026-10-11 16:17:54 +00:00

Author

Owner

Copy link

CA-01 stronger test found heap initialization alone is insufficient for imported signers. Pinned OpenSSL3.6.3 crypto/ec/ecx_backend.c:64-73 uses OSSL_PARAM_get_octet_string for raw provider import; crypto/params.c:1364 allocates ordinary malloc. Real imported-key secure counter delta=0 despite VmLck1024KiB. Existing DER decoder instead allocates32secure bytes, provider-backed, still32 after an actual Ed25519 signature. Evidence: import-probe.txt and ca01-locked-pages-debug.txt. Repair will reuse that decoder via one fixed48-byte in-memory PKCS#8 buffer in LockedBytes for wrapping unlock and handoff import; no disk/PEM, persistence/frame change or crypto-engine choice. Decoder PKCS#8 transient storage is cleansed on free (crypto/asn1/p8_pkey.c:24-28). Heap-only attempt and subsequent corrected unused-import/doc lints are retained as failed evidence. Final gate must pass all non-size rows.

CA-01 stronger test found heap initialization alone is insufficient for imported signers. Pinned OpenSSL3.6.3 crypto/ec/ecx_backend.c:64-73 uses OSSL_PARAM_get_octet_string for raw provider import; crypto/params.c:1364 allocates ordinary malloc. Real imported-key secure counter delta=0 despite VmLck1024KiB. Existing DER decoder instead allocates32secure bytes, provider-backed, still32 after an actual Ed25519 signature. Evidence: import-probe.txt and ca01-locked-pages-debug.txt. Repair will reuse that decoder via one fixed48-byte in-memory PKCS#8 buffer in LockedBytes for wrapping unlock and handoff import; no disk/PEM, persistence/frame change or crypto-engine choice. Decoder PKCS#8 transient storage is cleansed on free (crypto/asn1/p8_pkey.c:24-28). Heap-only attempt and subsequent corrected unused-import/doc lints are retained as failed evidence. Final gate must pass all non-size rows.

kayg referenced this issue from a commit 2026-10-11 16:35:51 +00:00

build: reuse pinned OpenSSL at the audited CA allocation boundary (#154)

kayg commented 2026-10-11 16:57:50 +00:00

Author

Owner

Copy link

Resuming audit-ca-update after host resize. Restored orchestrator checkpoint 7cf68310 with git reset --soft HEAD~1; base cadac1ddb1. Read #154 history (128 comments, no linked parent), contracts and audit README. Reviewing CA-01 patch and existing signer-hardening scratch worktree; will split commits, run targeted gates per commit and full fast on final heads. No deployment.

Resuming audit-ca-update after host resize. Restored orchestrator checkpoint 7cf68310 with git reset --soft HEAD~1; base cadac1ddb15a6bb2103db28311cac827920d7b40. Read #154 history (128 comments, no linked parent), contracts and audit README. Reviewing CA-01 patch and existing signer-hardening scratch worktree; will split commits, run targeted gates per commit and full fast on final heads. No deployment.

kayg referenced this issue from a commit 2026-10-11 16:58:35 +00:00

signer: bind release hashes to validated version and channel (#154)

kayg commented 2026-10-11 16:59:11 +00:00

Author

Owner

Copy link

SIG-01 committed a7c11bfb on signer-hardening from origin/dev lineage 50a89572 (head at resume 25e4e026). VERSION is mandatory and must equal the request with optional final LF; same read validated/hashed. Additive LF canonical MANIFEST includes format/version/derived-channel plus exact sorted SHA256SUMS, with MANIFEST.sig in existing SSHSIG namespace. Existing SHA256SUMS signatures preserved. Real Worker/independent ssh-keygen: 8/8 PASS; missing/mismatch regressions red before. SIG-02 unsafe-name regressions reproduced red; fix and docs follow. No deployment.

SIG-01 committed a7c11bfb on signer-hardening from origin/dev lineage 50a89572 (head at resume 25e4e026). VERSION is mandatory and must equal the request with optional final LF; same read validated/hashed. Additive LF canonical MANIFEST includes format/version/derived-channel plus exact sorted SHA256SUMS, with MANIFEST.sig in existing SSHSIG namespace. Existing SHA256SUMS signatures preserved. Real Worker/independent ssh-keygen: 8/8 PASS; missing/mismatch regressions red before. SIG-02 unsafe-name regressions reproduced red; fix and docs follow. No deployment.

kayg referenced this issue from a commit 2026-10-11 16:59:13 +00:00

signer: refuse ambiguous and unsafe artifact names before publication (#154)

kayg referenced this issue from a commit 2026-10-11 16:59:39 +00:00

docs: specify signed release framing and compatibility for owner deployment (#154)

kayg referenced this issue from a commit 2026-10-11 17:02:25 +00:00

shim: expose secure key allocation and bounded locked intake (#154)

kayg commented 2026-10-11 17:03:00 +00:00

Author

Owner

Copy link

Completed shim prerequisite 0f689f46: once-only pinned OpenSSL secure heap wrapper behind ca-handoff, 1MiB/32-byte blocks; reuse exclusive LockedBytes for up to32KiB with Send ownership transfer. fmt, feature-enabled shim clippy and kernel locked-page/bounds test PASS (1/1). Broader shim64 PASS/13 ignored, detach2 PASS; mouse probe could not find zig because targeted command omitted gate PATH (stderr evidence), no source failure inferred. Added existing staged Zig to targeted PATH; full gate will run the probe. Replaced only orchestrator WIP7cf68310 via exact-SHA force-with-lease to publish split history; no other branch changed.

Completed shim prerequisite 0f689f46: once-only pinned OpenSSL secure heap wrapper behind ca-handoff, 1MiB/32-byte blocks; reuse exclusive LockedBytes for up to32KiB with Send ownership transfer. fmt, feature-enabled shim clippy and kernel locked-page/bounds test PASS (1/1). Broader shim64 PASS/13 ignored, detach2 PASS; mouse probe could not find zig because targeted command omitted gate PATH (stderr evidence), no source failure inferred. Added existing staged Zig to targeted PATH; full gate will run the probe. Replaced only orchestrator WIP7cf68310 via exact-SHA force-with-lease to publish split history; no other branch changed.

kayg referenced this issue from a commit 2026-10-11 17:07:45 +00:00

server: protect persistent CA seeds before unlock and restart imports (#154)

kayg commented 2026-10-11 17:09:32 +00:00

Author

Owner

Copy link

CA-01 code committed a1e6f85c and pushed: secure heap initialized before cold generation/inherited signer import; root result0/2 refuses startup, non-root warns. Unlock/handoff imports reuse secure DER decoder via48-byte LockedBytes; existing formats and cold/no-timer custody unchanged. Remote-feature Clippy PASS. Checkpoint compiled regression already showed VmLck0->1024KiB, secure imported-seed delta32bytes (ca01-final-unlocked_signer_requires_persistent_locked_pages.txt); current fresh CA tests pending. Correction: resume package-only test lacked remote and ran0 CA tests; explicit --features remote rerun is building. No passing fresh CA result claimed yet. Full checkpoint ca01-fast-final also retains mesh continuation failure (not a waiver); final full gate follows.

CA-01 code committed a1e6f85c and pushed: secure heap initialized before cold generation/inherited signer import; root result0/2 refuses startup, non-root warns. Unlock/handoff imports reuse secure DER decoder via48-byte LockedBytes; existing formats and cold/no-timer custody unchanged. Remote-feature Clippy PASS. Checkpoint compiled regression already showed VmLck0->1024KiB, secure imported-seed delta32bytes (ca01-final-unlocked_signer_requires_persistent_locked_pages.txt); current fresh CA tests pending. Correction: resume package-only test lacked remote and ran0 CA tests; explicit --features remote rerun is building. No passing fresh CA result claimed yet. Full checkpoint ca01-fast-final also retains mesh continuation failure (not a waiver); final full gate follows.

kayg commented 2026-10-11 17:09:33 +00:00

Author

Owner

Copy link

SIG-02 committed9e60256d; docs/evidence50be0d21; both pushed signer-hardening. Refuse unsafe/nested filenames with static HTTP400 before publication. Flat1-128ASCII bytes, initial alphanumeric, remainder letters/digits/dot/underscore/hyphen; reject LF/CR/NUL/path separators/whitespace/non-ASCII/leading option markers. 14 unsafe-name tests FAIL before and PASS after,23total Worker tests PASS (node and real ssh-keygen). Owner manual deployment summary: mandatory exact VERSION(409 missing/mismatch), additive MANIFEST+MANIFEST.sig binding version/derived channel/hashes, legacy SHA256SUMS signatures preserved, conservative filename validation(400). No new binding/key rotation; consumers must require manifest plus pinned-key/channel/hash/monotone checks. apps/release-signer/README.md gives exact bytes and verify commands. Full branch-head gate running; never deployed.

SIG-02 committed9e60256d; docs/evidence50be0d21; both pushed signer-hardening. Refuse unsafe/nested filenames with static HTTP400 before publication. Flat1-128ASCII bytes, initial alphanumeric, remainder letters/digits/dot/underscore/hyphen; reject LF/CR/NUL/path separators/whitespace/non-ASCII/leading option markers. 14 unsafe-name tests FAIL before and PASS after,23total Worker tests PASS (node and real ssh-keygen). Owner manual deployment summary: mandatory exact VERSION(409 missing/mismatch), additive MANIFEST+MANIFEST.sig binding version/derived channel/hashes, legacy SHA256SUMS signatures preserved, conservative filename validation(400). No new binding/key rotation; consumers must require manifest plus pinned-key/channel/hash/monotone checks. apps/release-signer/README.md gives exact bytes and verify commands. Full branch-head gate running; never deployed.

kayg referenced this issue from a commit 2026-10-11 17:23:29 +00:00

server: admit CA wrapping-key bodies into locked pages early (#154)

kayg referenced this issue from a commit 2026-10-11 17:23:44 +00:00

server: share bounded auth temporal admission without duplicate policy (#154)

kayg referenced this issue from a commit 2026-10-11 17:23:59 +00:00

server: limit CA ceremony starts per authenticated principal (#154)

kayg commented 2026-10-11 17:26:22 +00:00

Author

Owner

Copy link

Completed CA-01 intake7ef543a5, shared auth helper0c2cf292, CA-03 routes7aebe5af; each pushed audit-ca-update. Final targeted fmt/remote-Clippy PASS, helper1PASS/1diagnostic ignore, realHTTP/intake5PASS, CA-03realregressions2PASS. 31start requests now30accepted/HTTP429 Retry-After60/static body (155ms), before31accepted/98ms. Sameprincipal cookies/routes share budget; finish/status unaffected; helper tests principal/time/capacity boundaries. Remote CA suite56PASS/10ignored including8handoff tests and heap-refusal/import-lock regressions. Head7aebe5af full milestone gate exited at initial latency-proxy self-test: configured300ms observedp50347.05ms/p99347.93ms, before any Rust rows. No waiver or cause claimed; unchanged full gate rerun follows. Evidence ca03-final*.txt, milestone-fast.txt.

Completed CA-01 intake7ef543a5, shared auth helper0c2cf292, CA-03 routes7aebe5af; each pushed audit-ca-update. Final targeted fmt/remote-Clippy PASS, helper1PASS/1diagnostic ignore, realHTTP/intake5PASS, CA-03realregressions2PASS. 31start requests now30accepted/HTTP429 Retry-After60/static body (155ms), before31accepted/98ms. Sameprincipal cookies/routes share budget; finish/status unaffected; helper tests principal/time/capacity boundaries. Remote CA suite56PASS/10ignored including8handoff tests and heap-refusal/import-lock regressions. Head7aebe5af full milestone gate exited at initial latency-proxy self-test: configured300ms observedp50347.05ms/p99347.93ms, before any Rust rows. No waiver or cause claimed; unchanged full gate rerun follows. Evidence ca03-final*.txt, milestone-fast.txt.

kayg commented 2026-10-11 17:26:22 +00:00

Author

Owner

Copy link

CA-01 scale on resized infraternal-dev/12CPUs, CPUWeight10000, load36.98/38.61/31.36, no own build/browser overlap:10000 realEd25519 keys without/with secureheap VmLck0->1024KiB; secureused320512B (32B/key plus512B randomstate),1MiB heap69.4%headroom. RSS before/live keys9964/18408KiB vs11880/18216KiB; noisy-process diagnostics, not whole-server budget or improvement proof. Wrapped/unlocked fixture VmLck1024KiB, RSS11332->18840KiB, secure832B; additional importedkey32B allocation/release asserted. PeakHTTP mappings32KiB*8=256KiB/server; no idle worker. heap-scale.txt and locked-pages-resume.txt.

CA-01 scale on resized infraternal-dev/12CPUs, CPUWeight10000, load36.98/38.61/31.36, no own build/browser overlap:10000 realEd25519 keys without/with secureheap VmLck0->1024KiB; secureused320512B (32B/key plus512B randomstate),1MiB heap69.4%headroom. RSS before/live keys9964/18408KiB vs11880/18216KiB; noisy-process diagnostics, not whole-server budget or improvement proof. Wrapped/unlocked fixture VmLck1024KiB, RSS11332->18840KiB, secure832B; additional importedkey32B allocation/release asserted. PeakHTTP mappings32KiB*8=256KiB/server; no idle worker. heap-scale.txt and locked-pages-resume.txt.

kayg referenced this issue from a commit 2026-10-11 17:46:48 +00:00

test: distinguish repaired CA properties from deferred update findings (#154)

kayg referenced this issue from a commit 2026-10-11 18:00:05 +00:00

test: preserve reproducible release signer cost measurements (#154)

kayg referenced this issue from a commit 2026-10-11 18:35:18 +00:00

docs: record CA and signer repair evidence and deferred update contract (#154)

kayg commented 2026-10-11 18:47:29 +00:00

Author

Owner

Copy link

Finished the authorized repair scope. Production head b0cf61efca (audit-ca-update); Worker head 50be0d219d (signer-hardening). Both pushed; no deployment; issue remains open.

Completed evidence/reproducer steps: 3c740108 hardening-phase audit harness, d1f4159f Worker cost reproducer, b0cf61ef repair/evidence/checklist/deferred-update documentation. Evidence: docs/verification/ca-update-audit/README.md and evidence/ca-update-hardening/. All11 expected audit outcomes match; CA-01/CA-03 repaired, CA-02 still passes, UP-01/02/03 deliberately still fail. Worker23 tests pass; TypeScript154 tracer/36 protocol pass; remote-disabled build passes.

CA sizing: 10000 real keys use320512 secure bytes including512 RNG bytes; persistent VmLck1024KiB, measured before0. One key import/release changes secure use by32B. Before/after diagnostic RSS endpoints18408/18216KiB at10000keys; high host load, no performance-improvement claim. Shared principal admission is30/min across all start routes/cookies; finish/status bypass it. README records4096-principal and12/1002-file Worker diagnostics and limitations.

Owner manual Worker change summary: upload requires matching VERSION (409 otherwise), artifact names restricted to1-128 conservative ASCII characters (400 otherwise), additive MANIFEST + MANIFEST.sig bind version/channel/exact sorted hashes using existing key/namespace. Legacy SHA256SUMS signatures preserved for compatibility; legacy verification alone cannot establish the identity binding. No key/binding rotation required; owner deploys manually. UP notes specify pinned-key/channel/monotone verification, sealed memfd admission/execution, and signed-version self-check before runtime shutdown; implementation remains on release-pipeline.

Final production scripts/verify fast on b0cf61ef: network self-test PASS (p50306.75ms/p99313.40ms);303 server PASS/0FAIL/35ignored. No timeout/assertion changes or #118 waiver. Static x86_64 stripped PIE, no PT_INTERP:20090448B versus16404816B ceiling, excess3685632B, delta+22944B versus own audit base20067504B. ARM not reached. Verbatim final gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final Worker-branch scripts/verify fast on50be0d21:291 server PASS/0FAIL/32ignored. Static x86_64:20294992B, delta0B versus same dev baseline, existing16404816B ceiling; ARM not reached. Verbatim final gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Author reviewer checklist complete. Both full gates fail only their unchanged static-size ceiling; every other row passes. Independent review and manual Worker deployment remain with the owner.

Finished the authorized repair scope. Production head b0cf61efca93adbf5776677932195d15f6764fe0 (audit-ca-update); Worker head 50be0d219dee0111a44e2c8b82f7735d98c67d4b (signer-hardening). Both pushed; no deployment; issue remains open. Completed evidence/reproducer steps: 3c740108 hardening-phase audit harness, d1f4159f Worker cost reproducer, b0cf61ef repair/evidence/checklist/deferred-update documentation. Evidence: docs/verification/ca-update-audit/README.md and evidence/ca-update-hardening/. All11 expected audit outcomes match; CA-01/CA-03 repaired, CA-02 still passes, UP-01/02/03 deliberately still fail. Worker23 tests pass; TypeScript154 tracer/36 protocol pass; remote-disabled build passes. CA sizing: 10000 real keys use320512 secure bytes including512 RNG bytes; persistent VmLck1024KiB, measured before0. One key import/release changes secure use by32B. Before/after diagnostic RSS endpoints18408/18216KiB at10000keys; high host load, no performance-improvement claim. Shared principal admission is30/min across all start routes/cookies; finish/status bypass it. README records4096-principal and12/1002-file Worker diagnostics and limitations. Owner manual Worker change summary: upload requires matching VERSION (409 otherwise), artifact names restricted to1-128 conservative ASCII characters (400 otherwise), additive MANIFEST + MANIFEST.sig bind version/channel/exact sorted hashes using existing key/namespace. Legacy SHA256SUMS signatures preserved for compatibility; legacy verification alone cannot establish the identity binding. No key/binding rotation required; owner deploys manually. UP notes specify pinned-key/channel/monotone verification, sealed memfd admission/execution, and signed-version self-check before runtime shutdown; implementation remains on release-pipeline. Final production scripts/verify fast on b0cf61ef: network self-test PASS (p50306.75ms/p99313.40ms);303 server PASS/0FAIL/35ignored. No timeout/assertion changes or #118 waiver. Static x86_64 stripped PIE, no PT_INTERP:20090448B versus16404816B ceiling, excess3685632B, delta+22944B versus own audit base20067504B. ARM not reached. Verbatim final gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Final Worker-branch scripts/verify fast on50be0d21:291 server PASS/0FAIL/32ignored. Static x86_64:20294992B, delta0B versus same dev baseline, existing16404816B ceiling; ARM not reached. Verbatim final gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Author reviewer checklist complete. Both full gates fail only their unchanged static-size ceiling; every other row passes. Independent review and manual Worker deployment remain with the owner.

kayg commented 2026-10-11 18:52:18 +00:00

Author

Owner

Copy link

Starting independent verification review on review-audit-ca-update at target b0cf61efca; merge base with dev 15d15c257c. Read all 136 issue comments; original issue has no linked parent. Continuing recorded CA repairs and deferred UP-01/02/03 evidence, checking production behavior and fresh fast gate. Local commits only, no implementation fixes, push or deployment. Unique TRACER_TEST_PORT=5874; job-local Cargo target and short fixture root.

Starting independent verification review on review-audit-ca-update at target b0cf61efca93adbf5776677932195d15f6764fe0; merge base with dev 15d15c257c6985c838b41f6db5216b6544f60bd0. Read all 136 issue comments; original issue has no linked parent. Continuing recorded CA repairs and deferred UP-01/02/03 evidence, checking production behavior and fresh fast gate. Local commits only, no implementation fixes, push or deployment. Unique TRACER_TEST_PORT=5874; job-local Cargo target and short fixture root.

kayg commented 2026-10-11 19:01:43 +00:00

Author

Owner

Copy link

Independent review gate evidence: supplemental TypeScript phase on target b0cf61ef failed only the unchanged apps/tracer/src/canvas/mesh/layout.test.ts:75 timing assertion (1000 nodes, 10 layouts, average114.127ms versus25ms maximum;153PASS/1FAIL). Host load immediately after52.69/44.82/33.09; own cold Rust compilation overlapped. No code/assertion change or load waiver. Retaining ts-head.txt and requiring a fresh weighted full TS pass after own builds stop. Full Rust fast gate still running against unchanged target sources.

Independent review gate evidence: supplemental TypeScript phase on target b0cf61ef failed only the unchanged apps/tracer/src/canvas/mesh/layout.test.ts:75 timing assertion (1000 nodes, 10 layouts, average114.127ms versus25ms maximum;153PASS/1FAIL). Host load immediately after52.69/44.82/33.09; own cold Rust compilation overlapped. No code/assertion change or load waiver. Retaining ts-head.txt and requiring a fresh weighted full TS pass after own builds stop. Full Rust fast gate still running against unchanged target sources.

kayg commented 2026-10-11 19:08:47 +00:00

Author

Owner

Copy link

Review gate setup correction: first fast run stopped its workspace test row at scripts/agent_fixture.py:33 before the real daemon oracle: chosen review state root yielded a117-byte AF_UNIX path. Corrected to review-owned /home/kayg/.cache/codex-scratch/acur/s; preflight passes. No product code/assertion/timeout change and no #118 waiver. Retain fast-head.txt; full unchanged-source gate will rerun after the initial static build. Independently compiled target-head CA/deferred-UP cases are running with the corrected fixture root.

Review gate setup correction: first fast run stopped its workspace test row at scripts/agent_fixture.py:33 before the real daemon oracle: chosen review state root yielded a117-byte AF_UNIX path. Corrected to review-owned /home/kayg/.cache/codex-scratch/acur/s; preflight passes. No product code/assertion/timeout change and no #118 waiver. Retain fast-head.txt; full unchanged-source gate will rerun after the initial static build. Independently compiled target-head CA/deferred-UP cases are running with the corrected fixture root.

kayg commented 2026-10-11 19:11:07 +00:00

Author

Owner

Copy link

Independent target-head verification b0cf61ef confirms deferred P1 UP-01 and UP-03 remain: unsigned_or_tampered_replacement_is_refused_before_exec fails exit101 (4/4 unsigned/tampered/truncated/65MiB candidates admitted;0 executed;0.016s), restart_binary.rs:95 hook returnsOk. unusable_admitted_image_keeps_the_existing_service_running fails exit101 (live listener before replacement, refused connection after exec refusal;0.099s), restart.rs replacement shuts down runtime before exec. UP-02 P2 also reproduces retained-fd byte mutation (exit101;0.018s). These are existing deferred findings, not new CA regressions. Target-head CA custody, handoff, passkey authority, protected intake, root-memory-refusal and temporal-boundary controls pass. Durable review findings appended; independent real-ELF test commits and final gate/evidence follow. No implementation changes/push/deployment.

Independent target-head verification b0cf61ef confirms deferred P1 UP-01 and UP-03 remain: unsigned_or_tampered_replacement_is_refused_before_exec fails exit101 (4/4 unsigned/tampered/truncated/65MiB candidates admitted;0 executed;0.016s), restart_binary.rs:95 hook returnsOk. unusable_admitted_image_keeps_the_existing_service_running fails exit101 (live listener before replacement, refused connection after exec refusal;0.099s), restart.rs replacement shuts down runtime before exec. UP-02 P2 also reproduces retained-fd byte mutation (exit101;0.018s). These are existing deferred findings, not new CA regressions. Target-head CA custody, handoff, passkey authority, protected intake, root-memory-refusal and temporal-boundary controls pass. Durable review findings appended; independent real-ELF test commits and final gate/evidence follow. No implementation changes/push/deployment.

kayg commented 2026-10-11 19:39:54 +00:00

Author

Owner

Copy link

Independent UP-01 P1 test committed locally on review-audit-ca-update at c938abd9f7. reviewer_real_elf_requires_release_authentication uses actual copied ELF executables: unsigned and invalid-signature fixtures2/2 admitted,0 executed;exit101 in0.966s, restart_review_tests.rs:58. Explicit ignored regression preserves deferred state; implementation unchanged. Formatting/workspace test compilation pass. Corrected exact-target fast gate completed:303 server tests PASS; all Rust rows PASS except unchanged static ceiling. Fresh static20090384B/no PT_INTERP; separate TS154/36PASS and feature-disabled cargo check PASS. Isolated10000-key secureuse320512B/VmLck1024KiB;4096-principal admission p50/p9998.811/142.392us;100unlocks/100events/26800public log bytes at load59.66->58.04. No push/deployment.

Independent UP-01 P1 test committed locally on review-audit-ca-update at c938abd9f7d02e5c71c3ca89e8d08fdee3cda832. reviewer_real_elf_requires_release_authentication uses actual copied ELF executables: unsigned and invalid-signature fixtures2/2 admitted,0 executed;exit101 in0.966s, restart_review_tests.rs:58. Explicit ignored regression preserves deferred state; implementation unchanged. Formatting/workspace test compilation pass. Corrected exact-target fast gate completed:303 server tests PASS; all Rust rows PASS except unchanged static ceiling. Fresh static20090384B/no PT_INTERP; separate TS154/36PASS and feature-disabled cargo check PASS. Isolated10000-key secureuse320512B/VmLck1024KiB;4096-principal admission p50/p9998.811/142.392us;100unlocks/100events/26800public log bytes at load59.66->58.04. No push/deployment.

kayg commented 2026-10-11 19:41:25 +00:00

Author

Owner

Copy link

Independent UP-02 P2 test committed locally at 92eef26200 on review-audit-ca-update. reviewer_admitted_elf_header_cannot_be_superseded admits an actual ELF, writes/syncs its header through the source inode, then observes the changed header on the retained descriptor. Exit 101 in 1.748 s at restart_review_tests.rs:75; candidate executions = 0. Formatting and workspace test compilation pass. Existing deferred finding remains confirmed; no implementation change, push or deployment.

Independent UP-02 P2 test committed locally at 92eef262002c1b36765e11f4a9ece5a6650169a5 on review-audit-ca-update. reviewer_admitted_elf_header_cannot_be_superseded admits an actual ELF, writes/syncs its header through the source inode, then observes the changed header on the retained descriptor. Exit 101 in 1.748 s at restart_review_tests.rs:75; candidate executions = 0. Formatting and workspace test compilation pass. Existing deferred finding remains confirmed; no implementation change, push or deployment.

kayg commented 2026-10-11 19:42:51 +00:00

Author

Owner

Copy link

Independent UP-03 P1 test committed locally at 6b376eef55 on review-audit-ca-update. reviewer_exec_refusal_preserves_existing_listener runs in a bounded isolated subprocess: corrupts a real ELF before admission, proves its listener is live, invokes actual replacement, then fails because exec refusal removed the listener (restart_review_tests.rs:143). Exit 101 in 0.360 s; unusable candidate cannot execute. Formatting/workspace test compilation pass. All three confirmed deferred findings now have separate independent test commits. No implementation changes, push or deployment. Final reviewer checks/evidence archive follow.

Independent UP-03 P1 test committed locally at 6b376eef55a0fd73e815ec7f51fd497a570d98ba on review-audit-ca-update. reviewer_exec_refusal_preserves_existing_listener runs in a bounded isolated subprocess: corrupts a real ELF before admission, proves its listener is live, invokes actual replacement, then fails because exec refusal removed the listener (restart_review_tests.rs:143). Exit 101 in 0.360 s; unusable candidate cannot execute. Formatting/workspace test compilation pass. All three confirmed deferred findings now have separate independent test commits. No implementation changes, push or deployment. Final reviewer checks/evidence archive follow.

kayg commented 2026-10-11 19:46:18 +00:00

Author

Owner

Copy link

Reviewer checks: initial new-test Clippy caught option_map_unwrap_or_else in the private fixture (restart_review_tests.rs:9); corrected to equivalent map_or_else without a lint suppression or production change. Ordinary CLI check initially refused its pre-existing C probe under group-writable umask; rerun with umask 022 passes 38 tests/0 failures/6 explicit ignored regressions in 7.45 s. Corrected workspace all-target Clippy and formatting pass. Failed transcripts retained; no waiver or permission-policy change. Rechecking the three intentional failures before committing this test-only fixture cleanup and final evidence.

Reviewer checks: initial new-test Clippy caught option_map_unwrap_or_else in the private fixture (restart_review_tests.rs:9); corrected to equivalent map_or_else without a lint suppression or production change. Ordinary CLI check initially refused its pre-existing C probe under group-writable umask; rerun with umask 022 passes 38 tests/0 failures/6 explicit ignored regressions in 7.45 s. Corrected workspace all-target Clippy and formatting pass. Failed transcripts retained; no waiver or permission-policy change. Rechecking the three intentional failures before committing this test-only fixture cleanup and final evidence.

kayg commented 2026-10-11 19:47:40 +00:00

Author

Owner

Copy link

Reviewer fixture lint cleanup committed at 0c2e1318e4: equivalent map_or_else root selection, no assertion/permission-policy change. Formatting and corrected all-target workspace Clippy PASS; corrected ordinary CLI suite 38 PASS/0 FAIL/6 explicit ignores. All three explicit review probes still fail in one fresh Cargo invocation (0 PASS/3 FAIL in 2.51 s). Earlier test-only lint/umask attempts retained. Reviewer code changes are cfg(test) only; final static byte check and evidence archive underway. No implementation changes, push or deployment.

Reviewer fixture lint cleanup committed at 0c2e1318e43f28e85172db1300c323f3fbbbc79b: equivalent map_or_else root selection, no assertion/permission-policy change. Formatting and corrected all-target workspace Clippy PASS; corrected ordinary CLI suite 38 PASS/0 FAIL/6 explicit ignores. All three explicit review probes still fail in one fresh Cargo invocation (0 PASS/3 FAIL in 2.51 s). Earlier test-only lint/umask attempts retained. Reviewer code changes are cfg(test) only; final static byte check and evidence archive underway. No implementation changes, push or deployment.

kayg commented 2026-10-11 22:29:39 +00:00

Author

Owner

Copy link

Resuming independent custody-only verification on review-audit-ca-update, base/head 4a598a1c58. Target b0cf61efca, merge base 15d15c257c. Read all 145 comments on #154; issue has no linked parent. UP-01/02/03 settled/deferred and will not be rerun. Fresh custody tests, locked/release observations, principal isolation, restart/log outcomes and local weighted measurements; no push or deployment. Details remain evidence/review-audit-ca-update/.

Resuming independent custody-only verification on review-audit-ca-update, base/head 4a598a1c586c495bb2fabb8356c74f631142b0ad. Target b0cf61efca93adbf5776677932195d15f6764fe0, merge base 15d15c257c6985c838b41f6db5216b6544f60bd0. Read all 145 comments on #154; issue has no linked parent. UP-01/02/03 settled/deferred and will not be rerun. Fresh custody tests, locked/release observations, principal isolation, restart/log outcomes and local weighted measurements; no push or deployment. Details remain evidence/review-audit-ca-update/.

kayg commented 2026-10-11 22:31:09 +00:00

Author

Owner

Copy link

Starting independent verification on review-signer-hardening at target 50be0d219d; merge base with origin/dev 25e4e026f6. #154 has no linked parent. The requested signer-hardening/result.md is absent; the latest Worker report is recorded in #154 comments 123–136. Reviewing the three SIG-01/SIG-02 commits only. Local commits only; no implementation edits, push or deployment.

Starting independent verification on review-signer-hardening at target 50be0d219dee0111a44e2c8b82f7735d98c67d4b; merge base with origin/dev 25e4e026f6d7b312829653d9f163faba692f4db9. #154 has no linked parent. The requested signer-hardening/result.md is absent; the latest Worker report is recorded in #154 comments 123–136. Reviewing the three SIG-01/SIG-02 commits only. Local commits only; no implementation edits, push or deployment.

kayg commented 2026-10-11 22:34:12 +00:00

Author

Owner

Copy link

SIG-R1 P2 confirmed at apps/release-signer/src/index.js:84,126-128. The committed Worker regression signer_partial_manifest_publication_can_be_retried injects one SHA256SUMS put failure: the first request returns 500 after MANIFEST.sig persists, with releases/index.json absent; retry returns 409 instead of 200. Failing test committed locally on review-signer-hardening at 5125185221. Implementation unchanged. Full fast gate remains pending.

SIG-R1 P2 confirmed at apps/release-signer/src/index.js:84,126-128. The committed Worker regression signer_partial_manifest_publication_can_be_retried injects one SHA256SUMS put failure: the first request returns 500 after MANIFEST.sig persists, with releases/index.json absent; retry returns 409 instead of 200. Failing test committed locally on review-signer-hardening at 5125185221bdb0e86339a8b03c0900049f1ef4cb. Implementation unchanged. Full fast gate remains pending.

kayg commented 2026-10-11 22:35:55 +00:00

Author

Owner

Copy link

Custody continuation: independent libc observer of actual chunked_intake_is_bounded_before_parsing PASS. Both 32,768-byte locked mappings contain only zeroes immediately before real munmap, including the over-limit refusal path; retained evidence locked-release-observation.txt and locked_release_probe.c. No byte dumps or private material emitted. New authenticated-principal/cold-restart/provider-release tests and fresh fast gate still running; no verdict yet. Branch head remains 4a598a1c.

Custody continuation: independent libc observer of actual chunked_intake_is_bounded_before_parsing PASS. Both 32,768-byte locked mappings contain only zeroes immediately before real munmap, including the over-limit refusal path; retained evidence locked-release-observation.txt and locked_release_probe.c. No byte dumps or private material emitted. New authenticated-principal/cold-restart/provider-release tests and fresh fast gate still running; no verdict yet. Branch head remains 4a598a1c.

kayg commented 2026-10-11 22:35:56 +00:00

Author

Owner

Copy link

SIG-R2 P2: D226 mismatch at apps/release-signer/src/index.js:40,52. signer_edge_version_is_a_real_utc_timestamp shows edge-20260230T120000Z, edge-20260101T240000Z, and edge-99999999T999999Z all return HTTP 200 and write six R2 objects including releases/channels/edge.json. The invalid far-future identity can interfere with monotone edge admission. Failing test committed locally at 8b4c0e144e; implementation unchanged.

SIG-R2 P2: D226 mismatch at apps/release-signer/src/index.js:40,52. signer_edge_version_is_a_real_utc_timestamp shows edge-20260230T120000Z, edge-20260101T240000Z, and edge-99999999T999999Z all return HTTP 200 and write six R2 objects including releases/channels/edge.json. The invalid far-future identity can interfere with monotone edge admission. Failing test committed locally at 8b4c0e144eb819f89b69d4fef347a9f858516fc4; implementation unchanged.

kayg commented 2026-10-11 22:36:49 +00:00

Author

Owner

Copy link

SIG-R3 P2 at apps/release-signer/src/index.js:85,131-142. Barrier-controlled signer_concurrent_publications_remain_indexed makes two authorized release requests read the same empty index: both return HTTP 200, but the final releases/index.json has one row (accepted=2, indexed=1). This loses a successfully signed release from D224's append-only index. Failing test committed locally at c19b396047; implementation unchanged.

SIG-R3 P2 at apps/release-signer/src/index.js:85,131-142. Barrier-controlled signer_concurrent_publications_remain_indexed makes two authorized release requests read the same empty index: both return HTTP 200, but the final releases/index.json has one row (accepted=2, indexed=1). This loses a successfully signed release from D224's append-only index. Failing test committed locally at c19b3960477720a2be2287f03e3aa38f9c0f5cfe; implementation unchanged.

kayg referenced this issue 2026-10-11 22:58:17 +00:00

Add-host bootstrap fails on a NetBird-SSH-only host; failure step not logged #169

kayg commented 2026-10-11 23:03:20 +00:00

Author

Owner

Copy link

Custody controls: fresh 59 PASS/0 FAIL/11 diagnostic ignores, including 3 new independent tests (2 principals with 30 starts each; cold source plus real proof/signature; secure seed occurrence 1 -> 0 on last release). Final-source fmt/VT fmt/Clippy pass. Workspace test run with two test threads reports the existing auth socket fresh-delete test failed; isolated unchanged target test passes 1/1 in1.32s. Its source is byte-identical to dev. Failure details and detached dev baseline check pending; no #118 waiver or new custody finding inferred. Evidence: continuation-corrected-fast.txt, socket-fresh-delete-isolated.txt, dev-baseline-*.txt. Branch head still4a598a1c; no push/deploy.

Custody controls: fresh 59 PASS/0 FAIL/11 diagnostic ignores, including 3 new independent tests (2 principals with 30 starts each; cold source plus real proof/signature; secure seed occurrence 1 -> 0 on last release). Final-source fmt/VT fmt/Clippy pass. Workspace test run with two test threads reports the existing auth socket fresh-delete test failed; isolated unchanged target test passes 1/1 in1.32s. Its source is byte-identical to dev. Failure details and detached dev baseline check pending; no #118 waiver or new custody finding inferred. Evidence: continuation-corrected-fast.txt, socket-fresh-delete-isolated.txt, dev-baseline-*.txt. Branch head still4a598a1c; no push/deploy.

kayg commented 2026-10-11 23:08:43 +00:00

Author

Owner

Copy link

Gate comparison: two-thread full server suite305 PASS/1 FAIL/36 ignored (458.99s). Existing fresh_delete.rs:113 received static "mesh unavailable" instead of the expected fresh-proof refusal. This is an assertion/availability failure, not a #118 timeout; no waiver. Exact unchanged isolated test PASS on target1/1 in1.32s and detached dev1/1; test source identical. Failure and comparison archived in socket-failure-{details,decoded} and socket-fresh-delete-{isolated,dev}. Requiring complete serial fast rerun, unchanged assertions/deadlines. Cold-source review fixture also now decodes public certificate DER as a restarted process would instead of sharing its predecessor's provider reference. No production change or new custody P0/P1 inferred.

Gate comparison: two-thread full server suite305 PASS/1 FAIL/36 ignored (458.99s). Existing fresh_delete.rs:113 received static "mesh unavailable" instead of the expected fresh-proof refusal. This is an assertion/availability failure, not a #118 timeout; no waiver. Exact unchanged isolated test PASS on target1/1 in1.32s and detached dev1/1; test source identical. Failure and comparison archived in socket-failure-{details,decoded} and socket-fresh-delete-{isolated,dev}. Requiring complete serial fast rerun, unchanged assertions/deadlines. Cold-source review fixture also now decodes public certificate DER as a restarted process would instead of sharing its predecessor's provider reference. No production change or new custody P0/P1 inferred.

kayg commented 2026-10-11 23:22:14 +00:00

Author

Owner

Copy link

Finished independent verification. Target 50be0d219dee0111a44e2c8b82f7735d98c67d4b; merge base 25e4e026f6d7b312829653d9f163faba692f4db9; local review branch head c19b3960477720a2be2287f03e3aa38f9c0f5cfe. Findings: P0=0, P1=0, P2=3, P3=0. Verdict: MERGE (no P0/P1) under the owner rule; the P2 failing tests are for forward fixes. Test-only commits: 51251852, 8b4c0e14, c19b3960. No implementation change, push or deployment. Findings are recorded in /home/kayg/.local/state/codex-jobs/infraternal/review-signer-hardening/findings.md.

Worker tests: 23 existing pass; the three independent regressions fail as recorded. Exact-head scripts/verify fast: exit 1; Rust tests 291 passed, 0 failed, 32 ignored. The network self-test passed. Static x86_64 exceeded the configured size ceiling by 3,890,176 bytes; ARM was not reached. The TypeScript row was not reached after the Rust static-size failure.

Verbatim gate summary on 50be0d21:

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=300.71 p99_ms=321.04 result=PASS

/home/kayg/.cache/codex-scratch/signer-hardening-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 20294992 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20294992 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished independent verification. Target `50be0d219dee0111a44e2c8b82f7735d98c67d4b`; merge base `25e4e026f6d7b312829653d9f163faba692f4db9`; local review branch head `c19b3960477720a2be2287f03e3aa38f9c0f5cfe`. Findings: P0=0, P1=0, P2=3, P3=0. Verdict: MERGE (no P0/P1) under the owner rule; the P2 failing tests are for forward fixes. Test-only commits: `51251852`, `8b4c0e14`, `c19b3960`. No implementation change, push or deployment. Findings are recorded in `/home/kayg/.local/state/codex-jobs/infraternal/review-signer-hardening/findings.md`. Worker tests: 23 existing pass; the three independent regressions fail as recorded. Exact-head `scripts/verify fast`: exit 1; Rust tests 291 passed, 0 failed, 32 ignored. The network self-test passed. Static x86_64 exceeded the configured size ceiling by 3,890,176 bytes; ARM was not reached. The TypeScript row was not reached after the Rust static-size failure. Verbatim gate summary on `50be0d21`: ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=300.71 p99_ms=321.04 result=PASS /home/kayg/.cache/codex-scratch/signer-hardening-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 20294992 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20294992 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 23:27:44 +00:00

Author

Owner

Copy link

Starting the signer fix-forward on branch signer-hardening, base 50be0d219dee0111a44e2c8b82f7735d98c67d4b. I read the review findings and acceptance-test history in #154; the issue has no linked parent. I’ll cherry-pick the three test commits, fix the Worker within apps/release-signer/, run its suite and the final fast gate, and will not deploy.

Starting the signer fix-forward on branch `signer-hardening`, base `50be0d219dee0111a44e2c8b82f7735d98c67d4b`. I read the review findings and acceptance-test history in #154; the issue has no linked parent. I’ll cherry-pick the three test commits, fix the Worker within `apps/release-signer/`, run its suite and the final fast gate, and will not deploy.

kayg commented 2026-10-11 23:28:32 +00:00

Author

Owner

Copy link

Finding from acceptance-test review: the R3 test at c19b3960 counts 200 responses and checks index.length === accepted, which still passes if one concurrent request is refused. The brief requires both requests to return 200. I’ll retain the test commit unchanged and add accepted === 2 as an explicit assertion.

Finding from acceptance-test review: the R3 test at `c19b3960` counts 200 responses and checks `index.length === accepted`, which still passes if one concurrent request is refused. The brief requires both requests to return 200. I’ll retain the test commit unchanged and add `accepted === 2` as an explicit assertion.

kayg commented 2026-10-11 23:28:53 +00:00

Author

Owner

Copy link

Cherry-picked R1 acceptance test as 0305e719. Red reproduction: node --test --test-name-pattern=signer_partial_manifest_publication_can_be_retried apps/release-signer/test/signer.test.mjs fails at signer.test.mjs:111: retry returned 409, expected 200, after the injected SHA256SUMS write failure left MANIFEST.sig present.

Cherry-picked R1 acceptance test as `0305e719`. Red reproduction: `node --test --test-name-pattern=signer_partial_manifest_publication_can_be_retried apps/release-signer/test/signer.test.mjs` fails at signer.test.mjs:111: retry returned 409, expected 200, after the injected SHA256SUMS write failure left MANIFEST.sig present.

kayg commented 2026-10-11 23:29:09 +00:00

Author

Owner

Copy link

Cherry-picked R2 acceptance test as 65d0b8aa. Red reproduction: node --test --test-name-pattern=signer_edge_version_is_a_real_utc_timestamp apps/release-signer/test/signer.test.mjs accepts all three impossible values (2026-02-30, 24:00:00, and out-of-range date/time), returning 200 and writing six objects each; expected 400 with zero writes.

Cherry-picked R2 acceptance test as `65d0b8aa`. Red reproduction: `node --test --test-name-pattern=signer_edge_version_is_a_real_utc_timestamp apps/release-signer/test/signer.test.mjs` accepts all three impossible values (2026-02-30, 24:00:00, and out-of-range date/time), returning 200 and writing six objects each; expected 400 with zero writes.

kayg commented 2026-10-11 23:29:37 +00:00

Author

Owner

Copy link

Cherry-picked R3 acceptance test as 816a58c0. Red reproduction: the barrier-controlled requests both return 200, but the final index contains one row (accepted=2, indexed=1; test fails at signer.test.mjs:131). The original test’s equality could also pass on fewer accepted requests, so I’m adding the explicit both-200 assertion noted above.

Cherry-picked R3 acceptance test as `816a58c0`. Red reproduction: the barrier-controlled requests both return 200, but the final index contains one row (`accepted=2, indexed=1`; test fails at signer.test.mjs:131). The original test’s equality could also pass on fewer accepted requests, so I’m adding the explicit both-200 assertion noted above.

kayg commented 2026-10-11 23:30:03 +00:00

Author

Owner

Copy link

Strengthened the R3 test in 20385481: both concurrent responses must be 200 before index cardinality is checked. The focused red test still reports accepted=2, indexed=1, so the assertion preserves the intended acceptance behavior and does not weaken the reviewer regression.

Strengthened the R3 test in `20385481`: both concurrent responses must be 200 before index cardinality is checked. The focused red test still reports `accepted=2, indexed=1`, so the assertion preserves the intended acceptance behavior and does not weaken the reviewer regression.

kayg commented 2026-10-11 23:33:03 +00:00

Author

Owner

Copy link

Completed independent provider-release module: fe33439da3, local review-audit-ca-update only. Synthetic seed has1 occurrence in lo/dd pages while a key reference remains,0 after final drop; secure usage +32B -> prior count. Source crates/infraternal-server/src/ca_custody_review_tests.rs; evidence continuation-independent-tests.txt and continuation-serial-fast.txt. Serial fast:306 server PASS/0 FAIL/36 ignored, every non-size row PASS; unchanged static ceiling only. Release binary delta0B and identical target hash. No push/deploy.

Completed independent provider-release module: fe33439da31d34bcb0799b3645a1630fbea2d2f1, local review-audit-ca-update only. Synthetic seed has1 occurrence in lo/dd pages while a key reference remains,0 after final drop; secure usage +32B -> prior count. Source crates/infraternal-server/src/ca_custody_review_tests.rs; evidence continuation-independent-tests.txt and continuation-serial-fast.txt. Serial fast:306 server PASS/0 FAIL/36 ignored, every non-size row PASS; unchanged static ceiling only. Release binary delta0B and identical target hash. No push/deploy.

kayg commented 2026-10-11 23:34:14 +00:00

Author

Owner

Copy link

Added the R1 same-version content check in a5dabf43: after the injected failure, changed artifact bytes are refused without writes, and restoring the original bytes must allow retry. The focused test still reaches the expected red at the final retry assertion (409, expected 200); the changed-content refusal assertions pass before it.

Added the R1 same-version content check in `a5dabf43`: after the injected failure, changed artifact bytes are refused without writes, and restoring the original bytes must allow retry. The focused test still reaches the expected red at the final retry assertion (409, expected 200); the changed-content refusal assertions pass before it.

kayg commented 2026-10-11 23:34:15 +00:00

Author

Owner

Copy link

Completed independent HTTP/cold-unlock module 815be93483, local review-audit-ca-update only. Two separately registered principals each accept30 starts and then refuse; second principal cannot reset first. Cold trust is decoded public DER plus encrypted copies; new administrator proof restores an independently verified signature. Source auth/ca_custody_review_tests.rs; final serial fast306 PASS/0 FAIL/36 ignored, all non-size rows PASS, unchanged size-only failure; release delta0B. No push/deploy.

Completed independent HTTP/cold-unlock module 815be934831d2daa0ca37eef28f2fb7fdf4b18c2, local review-audit-ca-update only. Two separately registered principals each accept30 starts and then refuse; second principal cannot reset first. Cold trust is decoded public DER plus encrypted copies; new administrator proof restores an independently verified signature. Source auth/ca_custody_review_tests.rs; final serial fast306 PASS/0 FAIL/36 ignored, all non-size rows PASS, unchanged size-only failure; release delta0B. No push/deploy.

kayg commented 2026-10-11 23:34:36 +00:00

Author

Owner

Copy link

Updated the fixture at af2edb93 to model R2 etags and conditional put results; only the two admission reads are forced stale, then retries see current storage. The focused test still reproduces the product race (accepted=2, indexed=1). Cloudflare’s Workers API reference documents put() preconditions, etags, and null on a failed condition: https://developers.cloudflare.com/r2/api/workers/workers-api-reference/.

Updated the fixture at `af2edb93` to model R2 etags and conditional `put` results; only the two admission reads are forced stale, then retries see current storage. The focused test still reproduces the product race (`accepted=2, indexed=1`). Cloudflare’s Workers API reference documents `put()` preconditions, etags, and `null` on a failed condition: https://developers.cloudflare.com/r2/api/workers/workers-api-reference/.

kayg commented 2026-10-11 23:34:53 +00:00

Author

Owner

Copy link

Completed custody log/measurement wrapper module 16a8690238, local review-audit-ca-update only. Four real outcomes pass; checks actual synthetic seed/wrapping values as raw bytes/base64/hex/JSON arrays plus existing field/session/ceremony absence. Final serial fast306 server PASS/0 FAIL/36 ignored, all non-size rows PASS, unchanged static ceiling; release delta0B. Paired measurements still running without own build/test overlap. Evidence auth/ca_unlock_audit_tests.rs and continuation-serial-fast.txt. No push/deploy.

Completed custody log/measurement wrapper module 16a8690238ccfb485ea8184a666b4964cc0647f7, local review-audit-ca-update only. Four real outcomes pass; checks actual synthetic seed/wrapping values as raw bytes/base64/hex/JSON arrays plus existing field/session/ceremony absence. Final serial fast306 server PASS/0 FAIL/36 ignored, all non-size rows PASS, unchanged static ceiling; release delta0B. Paired measurements still running without own build/test overlap. Evidence auth/ca_unlock_audit_tests.rs and continuation-serial-fast.txt. No push/deploy.

kayg commented 2026-10-11 23:35:38 +00:00

Author

Owner

Copy link

Committed R1 fix 07fe74e2. Release outputs use create-only R2 writes; a retry accepts an existing output only when bytes match, and the index remains the completion marker. The changed-content retry check refuses with no extra writes. Focused test: node --test --test-name-pattern=signer_partial_manifest_publication_can_be_retried apps/release-signer/test/signer.test.mjs — 1 passed, 0 failed (0.33 s). node --check apps/release-signer/src/index.js and git diff --check pass.

Committed R1 fix `07fe74e2`. Release outputs use create-only R2 writes; a retry accepts an existing output only when bytes match, and the index remains the completion marker. The changed-content retry check refuses with no extra writes. Focused test: `node --test --test-name-pattern=signer_partial_manifest_publication_can_be_retried apps/release-signer/test/signer.test.mjs` — 1 passed, 0 failed (0.33 s). `node --check apps/release-signer/src/index.js` and `git diff --check` pass.

kayg commented 2026-10-11 23:36:21 +00:00

Author

Owner

Copy link

Committed R2 fix 3e4541da. validVersion checks D226 edge timestamps using Gregorian month lengths and leap years, rejecting invalid year/day/time values in the request handler before signRelease can write. Focused results: impossible timestamp regression 1/1 PASS; valid edge signed-identity regression 1/1 PASS; node --check and git diff --check pass.

Committed R2 fix `3e4541da`. `validVersion` checks D226 edge timestamps using Gregorian month lengths and leap years, rejecting invalid year/day/time values in the request handler before `signRelease` can write. Focused results: impossible timestamp regression 1/1 PASS; valid edge signed-identity regression 1/1 PASS; `node --check` and `git diff --check` pass.

kayg commented 2026-10-11 23:36:55 +00:00

Author

Owner

Copy link

Completed independent locked-intake release observer f15ab9cbc0, local review-audit-ca-update only. Real normal/overflow mappings2/2 entirely zero immediately before munmap;32768B each. C observer/build/observation committed with no dependency or production change. Full serial fast every non-size row PASS (306 server tests); unchanged D205 size ceiling, release delta0B/identical target hash. Evidence locked_release_probe.c and locked-release-observation.txt. No push/deploy.

Completed independent locked-intake release observer f15ab9cbc0f03605daadee1a315a923180cf450d, local review-audit-ca-update only. Real normal/overflow mappings2/2 entirely zero immediately before munmap;32768B each. C observer/build/observation committed with no dependency or production change. Full serial fast every non-size row PASS (306 server tests); unchanged D205 size ceiling, release delta0B/identical target hash. Evidence locked_release_probe.c and locked-release-observation.txt. No push/deploy.

kayg commented 2026-10-11 23:37:28 +00:00

Author

Owner

Copy link

Committed R3 fix c1a5b537. Index publication now uses R2 etag preconditions (etagDoesNotMatch: "*" for create, etagMatches for replace) and retries from the latest index after a conflict. The minute limit is checked at admission, allowing both concurrent requests admitted from the same snapshot to finish. node --test apps/release-signer/test/signer.test.mjs: 26 passed, 0 failed; node --check and git diff --check pass.

Committed R3 fix `c1a5b537`. Index publication now uses R2 etag preconditions (`etagDoesNotMatch: "*"` for create, `etagMatches` for replace) and retries from the latest index after a conflict. The minute limit is checked at admission, allowing both concurrent requests admitted from the same snapshot to finish. `node --test apps/release-signer/test/signer.test.mjs`: 26 passed, 0 failed; `node --check` and `git diff --check` pass.

kayg commented 2026-10-11 23:40:05 +00:00

Author

Owner

Copy link

Extended the R2 regression inside the same test case in 3dcdc72a: valid leap day 2024-02-29 is accepted; non-leap century day, second 60, and other impossible values are rejected before writes. Focused timestamp test: 1 passed, 0 failed.

Extended the R2 regression inside the same test case in `3dcdc72a`: valid leap day 2024-02-29 is accepted; non-leap century day, second 60, and other impossible values are rejected before writes. Focused timestamp test: 1 passed, 0 failed.

kayg commented 2026-10-11 23:40:49 +00:00

Author

Owner

Copy link

Strengthened the R3 regression again in 95af79be: it now asserts both successful responses and the exact two distinct versions (1.2.3, 1.2.4) in the index. Focused concurrency test: 1 passed, 0 failed.

Strengthened the R3 regression again in `95af79be`: it now asserts both successful responses and the exact two distinct versions (`1.2.3`, `1.2.4`) in the index. Focused concurrency test: 1 passed, 0 failed.

kayg commented 2026-10-11 23:41:32 +00:00

Author

Owner

Copy link

Strengthened the R3 fixture in 28ca4c9b: both append attempts now snapshot the same old etag, exactly one conditional write must lose, and the loser must retry. Focused test passes 1/1 and verifies both distinct versions are retained after both responses return 200.

Strengthened the R3 fixture in `28ca4c9b`: both append attempts now snapshot the same old etag, exactly one conditional write must lose, and the loser must retry. Focused test passes 1/1 and verifies both distinct versions are retained after both responses return 200.

kayg commented 2026-10-11 23:44:16 +00:00

Author

Owner

Copy link

P2 custody diagnostic finding RV-CA-01: zero unlock-latency regression is not confirmed. Five alternating before(cadac1dd)/protected(b0cf61ef) real authority processes per mode,1000 memberships/private copies and100 unlocks each, GNU debug/CPUWeight10000/no own build/test overlap. All5 paired p50 differences positive:0.309-0.737ms, median+0.609ms; medians of per-run p50s4.577->5.314ms, CPU p50s4.744->5.201ms. No release/whole-HTTP certification inferred. RSS medians after fixture35,628->36,292KiB (+664KiB, within1MiB locked heap); no idle worker added. Failing requested nonregression check committed immediately at 1f20bc0c57; verify_unlock_nonregression.py and paired-*.txt/paired-summary.json. P0/P1 new custody findings remain0. No production fix/push/deploy.

P2 custody diagnostic finding RV-CA-01: zero unlock-latency regression is not confirmed. Five alternating before(cadac1dd)/protected(b0cf61ef) real authority processes per mode,1000 memberships/private copies and100 unlocks each, GNU debug/CPUWeight10000/no own build/test overlap. All5 paired p50 differences positive:0.309-0.737ms, median+0.609ms; medians of per-run p50s4.577->5.314ms, CPU p50s4.744->5.201ms. No release/whole-HTTP certification inferred. RSS medians after fixture35,628->36,292KiB (+664KiB, within1MiB locked heap); no idle worker added. Failing requested nonregression check committed immediately at 1f20bc0c57296081e256b59374eb4c96f717fe23; verify_unlock_nonregression.py and paired-*.txt/paired-summary.json. P0/P1 new custody findings remain0. No production fix/push/deploy.

kayg commented 2026-10-11 23:48:42 +00:00

Author

Owner

Copy link

Completed paired measurement reproducer 9848807cf2, local review-audit-ca-update only. Ten weighted real-engine processes pass (five alternating pairs,1000 memberships/100 unlocks each), raw public logs committed; initial parser setup failure retained. RV-CA-01 diagnostic nonregression check fails as separately committed/reported, median paired p50+0.609ms; no new P0/P1. Fresh scale10,000 keys:320512 secureB, drop512B, VmLck0->1024KiB;4,096-principal helper p50/p99 88536/156157ns. Final serial fast all non-size rows PASS, unchanged size-only failure; supplemental TS PASS. No push/deploy.

Completed paired measurement reproducer 9848807cf24ca345c28f0fcc3b0213b2c1532fc4, local review-audit-ca-update only. Ten weighted real-engine processes pass (five alternating pairs,1000 memberships/100 unlocks each), raw public logs committed; initial parser setup failure retained. RV-CA-01 diagnostic nonregression check fails as separately committed/reported, median paired p50+0.609ms; no new P0/P1. Fresh scale10,000 keys:320512 secureB, drop512B, VmLck0->1024KiB;4,096-principal helper p50/p99 88536/156157ns. Final serial fast all non-size rows PASS, unchanged size-only failure; supplemental TS PASS. No push/deploy.

kayg commented 2026-10-11 23:53:10 +00:00

Author

Owner

Copy link

Finished custody-only independent verification: MERGE (no new P0/P1 in the custody changes). Head 62c852f805, local review-audit-ca-update; target b0cf61ef, merge base15d15c25. All requested custody controls tested; UP-01/02/03 remain settled/deferred, not rerun. No push/deploy; issue remains open.

Evidence/report: docs/verification/review-audit-ca-update/README.md and evidence/review-audit-ca-update/. 59 focused custody PASS; final server306 PASS/0 FAIL/36 ignored. Synthetic seed occurrence1->0 after last key reference, exact32 secureB;2 full32768B intake mappings zero before munmap;2 authenticated principals30 starts each cannot share/reset; outcomes no synthetic seed/wrapping bytes; public-DER cold source requires new real proof and restores verified signing. VmLck0->1024KiB;10,000 keys320512B secure/drop512B;4,096-principal helper88,536/156,157ns p50/p99. Transient copies are not all locked.

P2 RV-CA-01: GNU debug nonregression check FAIL, committed immediately; all5 pairs positive, median paired finish-p50+0.609ms. Per-run p50 medians4.577->5.314ms; RSS35,628->36,292KiB (+664KiB within1MiB locked heap). Loaded-host diagnostics, no release/whole-HTTP certification. The scoped no-new-P0/P1 rule permits MERGE; no zero-regression claim. Source/action performance follow-up has complete evidence.

Final serial scripts/verify fast: every non-size row PASS, unchanged static ceiling-only FAIL (20,090,384B vs16,404,816B; delta0B/identical target hash). Supplemental TS154/36 PASS. Earlier non-timeout socket availability assertion retained; isolated target/dev PASS, no #118 waiver, complete serial rerun PASS. Owned scratch baseline/targets/probes removed.

Verbatim final gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished custody-only independent verification: MERGE (no new P0/P1 in the custody changes). Head 62c852f805707905827d94f1643ced3d2c21ecf6, local review-audit-ca-update; target b0cf61ef, merge base15d15c25. All requested custody controls tested; UP-01/02/03 remain settled/deferred, not rerun. No push/deploy; issue remains open. Evidence/report: docs/verification/review-audit-ca-update/README.md and evidence/review-audit-ca-update/. 59 focused custody PASS; final server306 PASS/0 FAIL/36 ignored. Synthetic seed occurrence1->0 after last key reference, exact32 secureB;2 full32768B intake mappings zero before munmap;2 authenticated principals30 starts each cannot share/reset; outcomes no synthetic seed/wrapping bytes; public-DER cold source requires new real proof and restores verified signing. VmLck0->1024KiB;10,000 keys320512B secure/drop512B;4,096-principal helper88,536/156,157ns p50/p99. Transient copies are not all locked. P2 RV-CA-01: GNU debug nonregression check FAIL, committed immediately; all5 pairs positive, median paired finish-p50+0.609ms. Per-run p50 medians4.577->5.314ms; RSS35,628->36,292KiB (+664KiB within1MiB locked heap). Loaded-host diagnostics, no release/whole-HTTP certification. The scoped no-new-P0/P1 rule permits MERGE; no zero-regression claim. Source/action performance follow-up has complete evidence. Final serial scripts/verify fast: every non-size row PASS, unchanged static ceiling-only FAIL (20,090,384B vs16,404,816B; delta0B/identical target hash). Supplemental TS154/36 PASS. Earlier non-timeout socket availability assertion retained; isolated target/dev PASS, no #118 waiver, complete serial rerun PASS. Owned scratch baseline/targets/probes removed. Verbatim final gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-11 23:54:41 +00:00

Author

Owner

Copy link

Orchestrator: CA custody verification attempt 2 MERGE (review-audit-ca-update @ 62c852f8, pushed): no new P0/P1; VmLck 0 → 1,024 KiB; P2 unlock p50 +0.61 ms (debug). audit-ca-update joins production batch 3. Signer Worker: review MERGE with 3 P2 (retry after partial publish, timestamp validation, concurrent index) — fix-forward job signer-fixes running before owner redeploy.

Orchestrator: CA custody verification attempt 2 MERGE (review-audit-ca-update @ 62c852f8, pushed): no new P0/P1; VmLck 0 → 1,024 KiB; P2 unlock p50 +0.61 ms (debug). audit-ca-update joins production batch 3. Signer Worker: review MERGE with 3 P2 (retry after partial publish, timestamp validation, concurrent index) — fix-forward job signer-fixes running before owner redeploy.

kayg commented 2026-10-12 00:17:37 +00:00

Author

Owner

Copy link

R3 review found one avoidable R2 read per sign: both requests read the index at admission and then read it again before their conditional append. The concurrency regression now counts reads while forcing both stale writes; the red run reports 5 reads where 3 are sufficient (two admission reads plus one conflict retry). I will reuse the admission etag and retain the conditional retry.

R3 review found one avoidable R2 read per sign: both requests read the index at admission and then read it again before their conditional append. The concurrency regression now counts reads while forcing both stale writes; the red run reports 5 reads where 3 are sufficient (two admission reads plus one conflict retry). I will reuse the admission etag and retain the conditional retry.

kayg commented 2026-10-12 00:21:01 +00:00

Author

Owner

Copy link

Finished the #154 fix-forward on branch signer-hardening at 2f49c526cf. Local commit messages now include the relevant decision references; worktree is clean.

R1: output objects are create-only and retries accept only byte-identical partial outputs; changed bytes at the same version remain refused. R2: D226 edge timestamps are Gregorian UTC values validated before signing or writes. R3: conditional index append uses the admission etag, merges and retries after a conflict, and the regression forces one stale-etag conflict while both responses remain 200 and both versions stay indexed. The forced test path uses 3 index reads (two admissions, one retry).

Worker test output (verbatim summary):
1..26

tests 26

suites 0

pass 26

fail 0

cancelled 0

skipped 0

todo 0

duration_ms 1064.002315

Bundle dry-run: before 10.63 KiB upload / 3.58 KiB gzip; after 13.01 KiB / 4.40 KiB.

Final scripts/verify fast gate did not complete. It passed fmt, VT native fmt, CLI plugin compile-out, clippy, and its 24-test binary, then stalled in the unchanged Rust restart suite. Gate output excerpt (verbatim):
==> test
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ...
The same standalone restart test previously timed out at its existing 5-second deadline. I interrupted the final gate after the test remained stalled for over 60 seconds (runner exit status 130). This branch changes only apps/release-signer/{README.md,src/index.js,test/signer.test.mjs}; no Rust files changed. No deploy or push performed.

Finished the #154 fix-forward on branch signer-hardening at 2f49c526cfc3acb749396fd8ff906efdedc714da. Local commit messages now include the relevant decision references; worktree is clean. R1: output objects are create-only and retries accept only byte-identical partial outputs; changed bytes at the same version remain refused. R2: D226 edge timestamps are Gregorian UTC values validated before signing or writes. R3: conditional index append uses the admission etag, merges and retries after a conflict, and the regression forces one stale-etag conflict while both responses remain 200 and both versions stay indexed. The forced test path uses 3 index reads (two admissions, one retry). Worker test output (verbatim summary): 1..26 # tests 26 # suites 0 # pass 26 # fail 0 # cancelled 0 # skipped 0 # todo 0 # duration_ms 1064.002315 Bundle dry-run: before 10.63 KiB upload / 3.58 KiB gzip; after 13.01 KiB / 4.40 KiB. Final scripts/verify fast gate did not complete. It passed fmt, VT native fmt, CLI plugin compile-out, clippy, and its 24-test binary, then stalled in the unchanged Rust restart suite. Gate output excerpt (verbatim): ==> test test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... The same standalone restart test previously timed out at its existing 5-second deadline. I interrupted the final gate after the test remained stalled for over 60 seconds (runner exit status 130). This branch changes only apps/release-signer/{README.md,src/index.js,test/signer.test.mjs}; no Rust files changed. No deploy or push performed.

kayg commented 2026-10-12 00:21:21 +00:00

Author

Owner

Copy link

Correction to the gate note above: the standalone 5-second failure was restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths; the final gate stalled at restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control. A separate 20-second isolated run of the latter also timed out. These are distinct unchanged Rust tests.

Correction to the gate note above: the standalone 5-second failure was restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths; the final gate stalled at restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control. A separate 20-second isolated run of the latter also timed out. These are distinct unchanged Rust tests.

kayg commented 2026-10-12 00:36:22 +00:00

Author

Owner

Copy link

Starting independent delta review on review-signer-hardening at 2f49c526cfc3acb749396fd8ff906efdedc714da; review base 50be0d219dee0111a44e2c8b82f7735d98c67d4b, merge base with dev 25e4e026f6d7b312829653d9f163faba692f4db9. Read all 179 #154 comments; no linked parent. Prior SIG-R1/R2/R3 tests are carried forward in the target with updated R2-etag fixtures. The specified signer-hardening result.md is absent; used signer-fixes/result.md and the final #154 report. Reviewing only the requested signer delta; no push or deployment.

Starting independent delta review on `review-signer-hardening` at `2f49c526cfc3acb749396fd8ff906efdedc714da`; review base `50be0d219dee0111a44e2c8b82f7735d98c67d4b`, merge base with `dev` `25e4e026f6d7b312829653d9f163faba692f4db9`. Read all 179 #154 comments; no linked parent. Prior SIG-R1/R2/R3 tests are carried forward in the target with updated R2-etag fixtures. The specified signer-hardening result.md is absent; used signer-fixes/result.md and the final #154 report. Reviewing only the requested signer delta; no push or deployment.

kayg commented 2026-10-12 00:37:27 +00:00

Author

Owner

Copy link

Worker suite on review-signer-hardening at 2f49c526cf: 26 passed, 0 failed, 0 skipped (525.9 ms). Carried SIG-R1, SIG-R2 and SIG-R3 cases all pass; the forced stale-etag case records 3 index reads and 1 conditional conflict. No new failing test found in this step.

Worker suite on review-signer-hardening at 2f49c526cfc3acb749396fd8ff906efdedc714da: 26 passed, 0 failed, 0 skipped (525.9 ms). Carried SIG-R1, SIG-R2 and SIG-R3 cases all pass; the forced stale-etag case records 3 index reads and 1 conditional conflict. No new failing test found in this step.

kayg commented 2026-10-12 00:38:14 +00:00

Author

Owner

Copy link

Performance evidence on #154: the forced stale-etag regression at pre-optimization commit 520f5769 fails with 5 index reads; the target 2f49c526 passes with 3 reads and one conditional conflict. The delta reuses the admission snapshot and removes one avoidable read per signing request in this two-request race. No new finding from the read-count change.

Performance evidence on #154: the forced stale-etag regression at pre-optimization commit 520f5769 fails with 5 index reads; the target 2f49c526 passes with 3 reads and one conditional conflict. The delta reuses the admission snapshot and removes one avoidable read per signing request in this two-request race. No new finding from the read-count change.

kayg commented 2026-10-12 00:54:07 +00:00

Author

Owner

Copy link

Finished independent delta review at target 2f49c526cfc3acb749396fd8ff906efdedc714da, review base 50be0d219dee0111a44e2c8b82f7735d98c67d4b. Verdict: MERGE (no P0/P1). New findings: P0 0, P1 0, P2 0, P3 0. Earlier SIG-R1, SIG-R2 and SIG-R3 all PASS in the target Worker suite (26 passed, 0 failed). The stale-etag scenario uses 3 index reads at the target vs 5 at pre-optimization 520f5769.

scripts/verify fast was run on the target but did not complete. Formatting, VT formatting, CLI compile-out, Clippy, and the CLI compile-out test (24/24) passed. The Rust test suite reported six unchanged restart-test failures and two unchanged restart tests still running after over 60 seconds. I interrupted the stalled run; no final gate summary or TypeScript row was emitted. Full captured log: /home/kayg/.cache/codex-scratch/signer-hardening-review/verify-fast.txt.

Captured output (verbatim):

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=298.02 p99_ms=305.28 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 3m 11s

==> test
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... FAILED
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... FAILED
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... FAILED
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... FAILED
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... FAILED
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control has been running for over 60 seconds
test restart::tests::default_restart_opens_the_receiver_target_exactly_once has been running for over 60 seconds

Local review branch review-signer-hardening is clean at the target; no new failing test or code change was needed. No push or deployment.

Finished independent delta review at target `2f49c526cfc3acb749396fd8ff906efdedc714da`, review base `50be0d219dee0111a44e2c8b82f7735d98c67d4b`. Verdict: **MERGE (no P0/P1)**. New findings: P0 0, P1 0, P2 0, P3 0. Earlier SIG-R1, SIG-R2 and SIG-R3 all PASS in the target Worker suite (26 passed, 0 failed). The stale-etag scenario uses 3 index reads at the target vs 5 at pre-optimization `520f5769`. `scripts/verify fast` was run on the target but did not complete. Formatting, VT formatting, CLI compile-out, Clippy, and the CLI compile-out test (24/24) passed. The Rust test suite reported six unchanged restart-test failures and two unchanged restart tests still running after over 60 seconds. I interrupted the stalled run; no final gate summary or TypeScript row was emitted. Full captured log: `/home/kayg/.cache/codex-scratch/signer-hardening-review/verify-fast.txt`. Captured output (verbatim): ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=298.02 p99_ms=305.28 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 3m 11s ==> test test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... FAILED test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... FAILED test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... FAILED test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... FAILED test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... FAILED test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control has been running for over 60 seconds test restart::tests::default_restart_opens_the_receiver_target_exactly_once has been running for over 60 seconds ``` Local review branch `review-signer-hardening` is clean at the target; no new failing test or code change was needed. No push or deployment.

kayg commented 2026-10-12 00:56:05 +00:00

Author

Owner

Copy link

Orchestrator: signer-hardening delta review MERGE (no findings) at 2f49c526. Ready for the owner to redeploy the Worker from branch signer-hardening (deployment steps in apps/release-signer/README.md). The full Rust gate stalls in restart::tests, unrelated to the JS-only Worker; tracked as #174.

Orchestrator: signer-hardening delta review MERGE (no findings) at 2f49c526. Ready for the owner to redeploy the Worker from branch signer-hardening (deployment steps in apps/release-signer/README.md). The full Rust gate stalls in restart::tests, unrelated to the JS-only Worker; tracked as #174.

kayg commented 2026-10-12 02:52:34 +00:00

Author

Owner

Copy link

Orchestrator: production deploy of release-prod-3b (8cff05cd, add-host fixes + CA custody) at 02:51 UTC failed its health check and rolled back automatically. The static release server refused startup as root: "OpenSSL secure heap could not be locked and excluded from dumps; check the server memlock limit" with LimitMEMLOCK=8 MiB. Production is healthy on the previous binary and web (healthz 200); the restart re-locked the CA. The custody review only measured a GNU debug build. Job ca-static-heap (Sol) is reproducing on the perf VM with the static build and will add a static-build regression. Tonight ships release-prod-3 (add-host only) instead.

Orchestrator: production deploy of release-prod-3b (8cff05cd, add-host fixes + CA custody) at 02:51 UTC failed its health check and rolled back automatically. The static release server refused startup as root: "OpenSSL secure heap could not be locked and excluded from dumps; check the server memlock limit" with LimitMEMLOCK=8 MiB. Production is healthy on the previous binary and web (healthz 200); the restart re-locked the CA. The custody review only measured a GNU debug build. Job ca-static-heap (Sol) is reproducing on the perf VM with the static build and will add a static-build regression. Tonight ships release-prod-3 (add-host only) instead.

kayg commented 2026-10-12 02:53:37 +00:00

Author

Owner

Copy link

Starting static key-memory diagnosis on audit-ca-update at b0cf61efca. #154 history continues prior GNU-only custody measurements; no linked parent. Will diagnose pinned musl/Zig OpenSSL return values and root systemd 8MiB locking on the explicitly named perf VM. No deployment. Foundational build-option/dependency changes will be reported as an owner question before repair.

Starting static key-memory diagnosis on audit-ca-update at b0cf61efca93adbf5776677932195d15f6764fe0. #154 history continues prior GNU-only custody measurements; no linked parent. Will diagnose pinned musl/Zig OpenSSL return values and root systemd 8MiB locking on the explicitly named perf VM. No deployment. Foundational build-option/dependency changes will be reported as an owner question before repair.

kayg commented 2026-10-12 02:57:53 +00:00

Author

Owner

Copy link

Pinned OpenSSL static build source evidence for #154.

openssl-src=300.6.1+3.6.3
Production batch 8cff05cd and audit-ca-update b0cf61ef have identical provider versions.
631: if target.contains("musl") {
632: // Hack around openssl/openssl#7207 for now
633: configure.arg("-DOPENSSL_NO_SECURE_MEMORY");
634: }
635: }

mem_sec.c:109-127: CRYPTO_secure_malloc_init returns 0 unconditionally when OPENSSL_NO_SECURE_MEMORY is defined.
The actual generated x86 Configure command contains -DOPENSSL_NO_SECURE_MEMORY; no-secure-memory is not needed as a Configure feature name.
The 2018 historical upstream issue #7207 concerned a missing linux/mman.h header.
Candidate compilation without the macro using checksum-pinned Zig 0.15.2 succeeded (enabled-compile-x86.txt).

# Pinned OpenSSL static build source evidence for #154. openssl-src=300.6.1+3.6.3 Production batch 8cff05cd and audit-ca-update b0cf61ef have identical provider versions. 631: if target.contains("musl") { 632: // Hack around openssl/openssl#7207 for now 633: configure.arg("-DOPENSSL_NO_SECURE_MEMORY"); 634: } 635: } mem_sec.c:109-127: CRYPTO_secure_malloc_init returns 0 unconditionally when OPENSSL_NO_SECURE_MEMORY is defined. The actual generated x86 Configure command contains -DOPENSSL_NO_SECURE_MEMORY; no-secure-memory is not needed as a Configure feature name. The 2018 historical upstream issue #7207 concerned a missing linux/mman.h header. Candidate compilation without the macro using checksum-pinned Zig 0.15.2 succeeded (enabled-compile-x86.txt).

kayg commented 2026-10-12 03:04:12 +00:00

Author

Owner

Copy link

Owner build-option question for static key memory, #154.

Source cause confirmed: pinned openssl-src 300.6.1+3.6.3/src/lib.rs:631-634 adds -DOPENSSL_NO_SECURE_MEMORY to every musl Configure command. crypto/mem_sec.c:109-127 consequently returns 0 without attempting mlock or madvise. Production 8cff05cd and branch b0cf61ef pin identical provider versions. Increasing memlock or changing systemd sandboxing cannot enable code removed by compilation.

The brief explicitly requires an owner decision before a different OpenSSL build option. Candidate: remove the musl-only disable define while keeping the existing pinned OpenSSL and Zig, then add a self-check of the production static executable that requires return 1, resident locked pages and dump exclusion under 8MiB. Alternatives: patch openssl-src itself (explicit but fork upkeep), narrowly remove the define in the pinned compiler wrapper (small but compiler-policy coupling), or add a separately built OpenSSL (duplicates build ownership; not recommended). No replacement crypto engine is proposed.

Measurements are attached in the final evidence report. No build-policy repair or dependency change is applied until the owner selects how the existing provider is built. Root fail-closed remains unchanged. The new runtime regression will intentionally fail on today's static binary; it must land with the selected repair, rather than weaken startup enforcement.

Root/systemd measurements on infraternal-perf-test (Linux 6.12.69+deb13-amd64), shared lock held, load 0.00/0.00/0.00 -> 0.08/0.02/0.01:

• Baseline static provider: init_return=0, VmLck 0->0 KiB, refused at LimitMEMLOCK=8388608, infinity and unit default. No key allocations or other locked memory precede initialization in the reproducer.
• Candidate (only mem_sec.c enabled, original pinned archive otherwise unchanged): init_return=1, VmLck 0->1024 KiB under all three limits; all 10,000 synthetic 32-byte allocations are secure and resident in lo/dd mappings. 320000 bytes used; 0 after freeing. 1MiB heap per server, independent of host/session count; 10,000 retained keys consume 320000 secure bytes.
• Static x86 diagnostic size 3873384 -> 3881736 bytes (+8352). This is the provider diagnostic delta, not a measured whole-server repair delta. Production code is unchanged (0-byte source-induced delta); final server size and latency must be measured after the build policy is chosen.
• Candidate mem_sec.c compiles without extra Linux headers using checksum-pinned Zig 0.15.2. Removing the old disable define is feasible with this sysroot. No new dependency is required by this candidate.

Owner question: should this repository narrowly remove the upstream musl disable define in its pinned musl compiler wrapper, or maintain an explicit openssl-src patch? Both enable the existing secure heap; choose the build ownership before the production change. Recommendation: narrow wrapper handling of the exact upstream define for the two pinned Linux/musl targets, documented and covered by the final executable self-check. Reject increasing memlock: unlimited still returns 0. Reject replacing the allocator: the existing provider protects real pages once compiled in.

Blocked for owner build-option choice as expressly required by this brief; repair/regression not claimed complete. Evidence: evidence/ca-static-heap/root-systemd.txt, probe-build-x86.txt, heap_probe.c and build_probe.py. Fast gate was invoked before handoff; its final state is recorded in the finish note.

# Owner build-option question for static key memory, #154. Source cause confirmed: pinned openssl-src 300.6.1+3.6.3/src/lib.rs:631-634 adds -DOPENSSL_NO_SECURE_MEMORY to every musl Configure command. crypto/mem_sec.c:109-127 consequently returns 0 without attempting mlock or madvise. Production 8cff05cd and branch b0cf61ef pin identical provider versions. Increasing memlock or changing systemd sandboxing cannot enable code removed by compilation. The brief explicitly requires an owner decision before a different OpenSSL build option. Candidate: remove the musl-only disable define while keeping the existing pinned OpenSSL and Zig, then add a self-check of the production static executable that requires return 1, resident locked pages and dump exclusion under 8MiB. Alternatives: patch openssl-src itself (explicit but fork upkeep), narrowly remove the define in the pinned compiler wrapper (small but compiler-policy coupling), or add a separately built OpenSSL (duplicates build ownership; not recommended). No replacement crypto engine is proposed. Measurements are attached in the final evidence report. No build-policy repair or dependency change is applied until the owner selects how the existing provider is built. Root fail-closed remains unchanged. The new runtime regression will intentionally fail on today's static binary; it must land with the selected repair, rather than weaken startup enforcement. Root/systemd measurements on infraternal-perf-test (Linux 6.12.69+deb13-amd64), shared lock held, load 0.00/0.00/0.00 -> 0.08/0.02/0.01: - Baseline static provider: init_return=0, VmLck 0->0 KiB, refused at LimitMEMLOCK=8388608, infinity and unit default. No key allocations or other locked memory precede initialization in the reproducer. - Candidate (only mem_sec.c enabled, original pinned archive otherwise unchanged): init_return=1, VmLck 0->1024 KiB under all three limits; all 10,000 synthetic 32-byte allocations are secure and resident in lo/dd mappings. 320000 bytes used; 0 after freeing. 1MiB heap per server, independent of host/session count; 10,000 retained keys consume 320000 secure bytes. - Static x86 diagnostic size 3873384 -> 3881736 bytes (+8352). This is the provider diagnostic delta, not a measured whole-server repair delta. Production code is unchanged (0-byte source-induced delta); final server size and latency must be measured after the build policy is chosen. - Candidate mem_sec.c compiles without extra Linux headers using checksum-pinned Zig 0.15.2. Removing the old disable define is feasible with this sysroot. No new dependency is required by this candidate. Owner question: should this repository narrowly remove the upstream musl disable define in its pinned musl compiler wrapper, or maintain an explicit openssl-src patch? Both enable the existing secure heap; choose the build ownership before the production change. Recommendation: narrow wrapper handling of the exact upstream define for the two pinned Linux/musl targets, documented and covered by the final executable self-check. Reject increasing memlock: unlimited still returns 0. Reject replacing the allocator: the existing provider protects real pages once compiled in. Blocked for owner build-option choice as expressly required by this brief; repair/regression not claimed complete. Evidence: evidence/ca-static-heap/root-systemd.txt, probe-build-x86.txt, heap_probe.c and build_probe.py. Fast gate was invoked before handoff; its final state is recorded in the finish note.

kayg commented 2026-10-12 03:08:13 +00:00

Author

Owner

Copy link

Completed diagnostic-source step 77f94ef4 on audit-ca-update, pushed. Real static provider baseline returns0/VmLck0 under root systemd at8MiB, infinity and default; unshipped enabled-mem_sec candidate returns1/VmLck1024KiB, all10000 allocations secure/resident/lo+dd, usage320000->0B. Provider diagnostic size+8352B; not a whole-server repair delta. All six expected root outcomes pass; C Wall/Wextra/Werror, shell/Python/fmt/diff checks pass. Fast gate invoked then interrupted in Clippy at the owner build-option boundary; no complete gate claim. Production repair and executable regression pending owner choice already posted on #154.

Completed diagnostic-source step 77f94ef4 on audit-ca-update, pushed. Real static provider baseline returns0/VmLck0 under root systemd at8MiB, infinity and default; unshipped enabled-mem_sec candidate returns1/VmLck1024KiB, all10000 allocations secure/resident/lo+dd, usage320000->0B. Provider diagnostic size+8352B; not a whole-server repair delta. All six expected root outcomes pass; C Wall/Wextra/Werror, shell/Python/fmt/diff checks pass. Fast gate invoked then interrupted in Clippy at the owner build-option boundary; no complete gate claim. Production repair and executable regression pending owner choice already posted on #154.

kayg commented 2026-10-12 03:09:14 +00:00

Author

Owner

Copy link

Investigation handoff (repair blocked for the owner build-option choice explicitly required by the brief): audit-ca-update head 45828e165e, both atomic commits pushed (77f94ef4 diagnostic,45828e16 report/evidence). No production build policy/dependency/decision changed; root fail-closed preserved. Issue remains open.

Cause: openssl-src 300.6.1+3.6.3 src/lib.rs:631-634 adds OPENSSL_NO_SECURE_MEMORY to all musl targets; mem_sec.c returns0 without locking syscalls. Root/systemd baseline init0/VmLck0 at8MiB, infinity and default. Unshipped candidate init1/VmLck1024KiB;10000 synthetic allocations resident/secure/lo+dd, usage320000->0B. Diagnostic binary+8352B; whole-server repair delta not measured. Owner question/options already posted. Report: docs/verification/ca-static-heap/README.md; raw evidence: evidence/ca-static-heap/.

Checks: strict C compilation and all six expected real root outcomes PASS; bash syntax/Python compilation/fmt/diff PASS. Full scripts/verify fast was invoked in CPUWeight10000 scope, network/formatting completed; interrupted during Clippy (exit130) at the required owner boundary. Full-server and aarch64 builds also interrupted; no complete gate or static-server repair pass claimed. Worktree source unchanged after diagnostic gate; final commit only records docs/evidence. Cleanup removes only this job's uploaded diagnostics and scratch target.

Verbatim captured scripts/verify fast output (incomplete, exit130):

Running as unit: run-p2762851-i6956750.scope; invocation ID: 523a8c9c97354229814dc15460f6bbd2
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.93 p99_ms=315.23 result=PASS

==> fmt

==> VT native fmt

==> clippy
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
    Checking cfg-if v1.0.5
   Compiling serde v1.0.229
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
    Checking memchr v2.8.3
   Compiling version_check v0.9.5
    Checking itoa v1.0.18
    Checking pin-project-lite v0.2.17
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
    Checking typenum v1.20.1
    Checking bytes v1.12.1
   Compiling zmij v1.0.23
    Checking once_cell v1.21.4
   Compiling generic-array v0.14.7
   Compiling icu_properties_data v2.3.0
    Checking subtle v2.6.1
    Checking log v0.4.34
   Compiling icu_normalizer_data v2.3.0
   Compiling thiserror v2.0.21
    Checking futures-core v0.3.34
    Checking stable_deref_trait v1.2.1
   Compiling num-traits v0.2.19
    Checking tracing-core v0.1.36
    Checking smallvec v1.16.2
   Compiling serde_json v1.0.151
    Checking futures-sink v0.3.34
   Compiling jobserver v0.1.35
    Checking slab v0.4.12
   Compiling crossbeam-utils v0.8.23
   Compiling parking_lot_core v0.9.12
   Compiling cfg_aliases v0.2.2
    Checking getrandom v0.2.17
    Checking socket2 v0.6.5
    Checking errno v0.3.14
    Checking mio v1.2.4
    Checking block-buffer v0.10.4
    Checking signal-hook-registry v1.4.8
    Checking cpufeatures v0.2.17
    Checking bitflags v2.13.2
    Checking writeable v0.6.4
    Checking litemap v0.8.3
   Compiling cc v1.6.0
    Checking rand_core v0.6.4
    Checking utf8_iter v1.0.4
    Checking equivalent v1.0.2
    Checking crypto-common v0.1.7
    Checking percent-encoding v2.3.2
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling scopeguard v1.2.0
    Checking digest v0.10.7
    Checking form_urlencoded v1.2.2
   Compiling lock_api v0.4.14
    Checking hashbrown v0.17.1
    Checking futures-task v0.3.34
    Checking futures-io v0.3.34
   Compiling heck v0.5.0
   Compiling openssl-src v300.6.1+3.6.3
   Compiling libsqlite3-sys v0.30.1
   Compiling memoffset v0.9.1
    Checking indexmap v2.14.2
   Compiling nix v0.30.1
   Compiling openssl-sys v0.9.117
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling parking_lot v0.12.5
   Compiling hashbrown v0.15.5
   Compiling futures-util v0.3.34
    Checking futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling tokio v1.53.2
   Compiling crc-catalog v2.5.0
   Compiling sha2 v0.10.9
   Compiling hashlink v0.10.0
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling base64 v0.22.1
   Compiling atoi v2.0.0
   Compiling flume v0.11.1
   Compiling tracing-attributes v0.1.31
   Compiling serde_derive v1.0.229
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling thiserror-impl v2.0.21
   Compiling tokio-macros v2.7.2
    Checking tracing v0.1.44
   Compiling futures-macro v0.3.34
   Compiling futures-executor v0.3.34
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling openssl v0.10.81
   Compiling tokio-stream v0.1.19
    Checking foreign-types-shared v0.1.1
    Checking zerofrom v0.1.8
    Checking foreign-types v0.3.2
    Checking yoke v0.8.3
    Checking either v1.18.0
    Checking serde_urlencoded v0.7.1
   Compiling openssl-macros v0.1.1
   Compiling hex v0.4.3
    Checking zerovec v0.11.8
    Checking zerotrie v0.2.5
   Compiling dotenvy v0.15.7
    Checking arrayvec v0.7.8
    Checking rand_core v0.10.1
   Compiling getrandom v0.4.3
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-shim)
    Checking zeroize v1.9.0
   Compiling zerocopy v0.8.60
   Compiling zerocopy-derive v0.8.60
    Checking tinystr v0.8.4
    Checking potential_utf v0.1.6
    Checking vte v0.15.0
   Compiling ring v0.17.14
    Checking http v1.5.0
    Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-protocol)
    Checking icu_collections v2.3.0
    Checking untrusted v0.9.0
   Compiling getrandom v0.3.4
    Checking icu_locale_core v2.3.0
    Checking rustls-pki-types v1.15.1
    Checking uuid v1.27.0
   Compiling rustls v0.23.45
    Checking cpufeatures v0.3.1
    Checking tinyvec v1.13.3
   Compiling quinn-udp v0.5.16
   Compiling httparse v1.10.1
   Compiling num-conv v0.2.2
    Checking chacha20 v0.10.2
   Compiling icu_provider v2.3.1
   Compiling time-core v0.1.9
    Checking regex-syntax v0.8.11
   Compiling tokio-openssl v0.6.5
    Checking minimal-lexical v0.2.1
   Compiling thiserror v1.0.69
    Checking rand v0.10.3
   Compiling time-macros v0.2.32
    Checking nom v7.1.3
    Checking rand_core v0.9.5
   Compiling icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
    Checking http-body v1.1.0
    Checking rand_pcg v0.10.2
    Checking regex-automata v0.4.18
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
    Checking rustls-webpki v0.103.15
   Compiling quinn v0.11.12
    Checking idna_adapter v1.2.2
    Checking deranged v0.5.8
    Checking powerfmt v0.2.1
    Checking rustc-hash v2.1.3
    Checking ppv-lite86 v0.2.21
    Checking half v2.7.1
    Checking idna v1.1.0
    Checking lru-slab v0.1.3
   Compiling asn1-rs-derive v0.5.1
    Checking rand_chacha v0.9.0
    Checking rusticata-macros v4.1.0
   Compiling url v2.5.8
    Checking time v0.3.55
    Checking tokio-util v0.7.19
    Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-mesh)
   Compiling asn1-rs-impl v0.2.0
    Checking tower-service v0.3.3
    Checking data-encoding v2.11.1
    Checking rand v0.9.5
    Checking num-integer v0.1.47
    Checking try-lock v0.2.5
   Compiling oid-registry v0.7.1
    Checking sqlx-core v0.8.6
    Checking atomic-waker v1.1.2
    Checking fnv v1.0.7
    Checking lazy_static v1.5.1
    Checking httpdate v1.0.3
    Checking base64 v0.21.7
   Compiling pastey v0.1.1
    Checking want v0.3.2
    Checking h2 v0.4.19
    Checking num-bigint v0.4.8
    Checking mime v0.3.17
   Compiling rustversion v1.0.23
    Checking base64urlsafedata v0.5.5
    Checking asn1-rs v0.6.2
    Checking quinn-proto v0.11.19
   Compiling unicase v2.10.0
   Compiling webauthn-attestation-ca v0.5.5
    Checking tower-layer v0.3.3
    Checking http-body-util v0.1.5
    Checking sha1 v0.10.7
    Checking sqlx-sqlite v0.8.6
   Compiling mime_guess v2.0.5
   Compiling fs-err v3.3.2
   Compiling webauthn-rs-core v0.5.5
    Checking sync_wrapper v1.0.2
    Checking der-parser v9.0.0
    Checking webauthn-rs-proto v0.5.5
    Checking tungstenite v0.29.0
    Checking serde_cbor_2 v0.13.0
    Checking rand_chacha v0.3.1
    Checking hex-conservative v0.2.3
    Checking x509-parser v0.16.0
    Checking base64ct v1.8.3
    Checking tokio-tungstenite v0.29.0
    Checking rand v0.8.8
    Checking bitcoin_hashes v0.14.101
    Checking hyper v1.11.1
    Checking password-hash v0.5.0
    Checking axum-core v0.5.6
    Checking tower v0.5.3
    Checking arc-swap v1.9.2
   Compiling sqlx-macros-core v0.8.6
    Checking sharded-slab v0.1.7
    Checking matchers v0.2.0
    Checking unicode-normalization v0.1.25
    Checking tracing-serde v0.2.0
    Checking blake2 v0.10.6
    Checking tracing-log v0.2.0
    Checking serde_path_to_error v0.1.20
    Checking thread_local v1.1.10
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-server)
    Checking hyper-util v0.1.21
    Checking nu-ansi-term v0.50.3
    Checking matchit v0.8.4
    Checking http-range-header v0.4.2
    Checking argon2 v0.5.3
    Checking bip39 v2.2.2
    Checking utf8parse v0.2.2
    Checking anstyle v1.0.14
    Checking anstyle-query v1.1.5
    Checking tracing-subscriber v0.3.23
   Compiling sqlx-macros v0.8.6
    Checking tower-http v0.6.11
    Checking anstyle-parse v1.0.0
    Checking colorchoice v1.0.5
    Checking is_terminal_polyfill v1.70.2
   Compiling libfuzzer-sys v0.4.13
    Checking axum v0.8.9
    Checking clap_lex v1.1.1
    Checking sqlx v0.8.6
    Checking strsim v0.11.1
   Compiling clap_derive v4.6.7
    Checking arbitrary v1.4.2
    Checking inout v0.1.4
    Checking anstream v1.0.0
    Checking universal-hash v0.5.1
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal)
    Checking opaque-debug v0.3.1
    Checking unicode-width v0.2.2
    Checking cipher v0.4.4
    Checking infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-plugin-api)
    Checking hmac v0.12.1
    Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/plugins/host-facts)
    Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/plugins/mesh)
    Checking clap_builder v4.6.7
    Checking aead v0.5.2
    Checking polyval v0.6.2
   Compiling crossbeam-epoch v0.9.21
    Checking vt100 v0.16.2
    Checking hkdf v0.12.4
   Compiling crossbeam-deque v0.8.8
    Checking ctr v0.9.2
    Checking aes v0.8.4
   Compiling rayon-core v1.13.0
    Checking plotters-backend v0.3.7
    Checking ghash v0.5.1
    Checking ciborium-io v0.2.2
    Checking itertools v0.13.0
    Checking same-file v1.0.6
    Checking cast v0.3.0
    Checking ciborium-ll v0.2.2
    Checking plotters-svg v0.3.7
    Checking walkdir v2.5.0
    Checking regex v1.13.1
    Checking aes-gcm v0.10.3
    Checking tinytemplate v1.2.1
    Checking plotters v0.3.7
    Checking ciborium v0.2.2
    Checking oorandom v11.1.5
    Checking anes v0.1.6
    Checking criterion-plot v0.6.0
    Checking clap v4.6.7
    Checking rayon v1.12.0
    Checking criterion v0.7.0

Investigation handoff (repair blocked for the owner build-option choice explicitly required by the brief): audit-ca-update head 45828e165e19088f569d0778f8f582f9733f7e08, both atomic commits pushed (77f94ef4 diagnostic,45828e16 report/evidence). No production build policy/dependency/decision changed; root fail-closed preserved. Issue remains open. Cause: openssl-src 300.6.1+3.6.3 src/lib.rs:631-634 adds OPENSSL_NO_SECURE_MEMORY to all musl targets; mem_sec.c returns0 without locking syscalls. Root/systemd baseline init0/VmLck0 at8MiB, infinity and default. Unshipped candidate init1/VmLck1024KiB;10000 synthetic allocations resident/secure/lo+dd, usage320000->0B. Diagnostic binary+8352B; whole-server repair delta not measured. Owner question/options already posted. Report: docs/verification/ca-static-heap/README.md; raw evidence: evidence/ca-static-heap/. Checks: strict C compilation and all six expected real root outcomes PASS; bash syntax/Python compilation/fmt/diff PASS. Full scripts/verify fast was invoked in CPUWeight10000 scope, network/formatting completed; interrupted during Clippy (exit130) at the required owner boundary. Full-server and aarch64 builds also interrupted; no complete gate or static-server repair pass claimed. Worktree source unchanged after diagnostic gate; final commit only records docs/evidence. Cleanup removes only this job's uploaded diagnostics and scratch target. Verbatim captured scripts/verify fast output (incomplete, exit130): ```text Running as unit: run-p2762851-i6956750.scope; invocation ID: 523a8c9c97354229814dc15460f6bbd2 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.93 p99_ms=315.23 result=PASS ==> fmt ==> VT native fmt ==> clippy Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Checking cfg-if v1.0.5 Compiling serde v1.0.229 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Checking memchr v2.8.3 Compiling version_check v0.9.5 Checking itoa v1.0.18 Checking pin-project-lite v0.2.17 Compiling pkg-config v0.3.34 Compiling vcpkg v0.2.15 Checking typenum v1.20.1 Checking bytes v1.12.1 Compiling zmij v1.0.23 Checking once_cell v1.21.4 Compiling generic-array v0.14.7 Compiling icu_properties_data v2.3.0 Checking subtle v2.6.1 Checking log v0.4.34 Compiling icu_normalizer_data v2.3.0 Compiling thiserror v2.0.21 Checking futures-core v0.3.34 Checking stable_deref_trait v1.2.1 Compiling num-traits v0.2.19 Checking tracing-core v0.1.36 Checking smallvec v1.16.2 Compiling serde_json v1.0.151 Checking futures-sink v0.3.34 Compiling jobserver v0.1.35 Checking slab v0.4.12 Compiling crossbeam-utils v0.8.23 Compiling parking_lot_core v0.9.12 Compiling cfg_aliases v0.2.2 Checking getrandom v0.2.17 Checking socket2 v0.6.5 Checking errno v0.3.14 Checking mio v1.2.4 Checking block-buffer v0.10.4 Checking signal-hook-registry v1.4.8 Checking cpufeatures v0.2.17 Checking bitflags v2.13.2 Checking writeable v0.6.4 Checking litemap v0.8.3 Compiling cc v1.6.0 Checking rand_core v0.6.4 Checking utf8_iter v1.0.4 Checking equivalent v1.0.2 Checking crypto-common v0.1.7 Checking percent-encoding v2.3.2 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling scopeguard v1.2.0 Checking digest v0.10.7 Checking form_urlencoded v1.2.2 Compiling lock_api v0.4.14 Checking hashbrown v0.17.1 Checking futures-task v0.3.34 Checking futures-io v0.3.34 Compiling heck v0.5.0 Compiling openssl-src v300.6.1+3.6.3 Compiling libsqlite3-sys v0.30.1 Compiling memoffset v0.9.1 Checking indexmap v2.14.2 Compiling nix v0.30.1 Compiling openssl-sys v0.9.117 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling parking_lot v0.12.5 Compiling hashbrown v0.15.5 Compiling futures-util v0.3.34 Checking futures-channel v0.3.34 Compiling parking v2.2.1 Compiling tokio v1.53.2 Compiling crc-catalog v2.5.0 Compiling sha2 v0.10.9 Compiling hashlink v0.10.0 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling base64 v0.22.1 Compiling atoi v2.0.0 Compiling flume v0.11.1 Compiling tracing-attributes v0.1.31 Compiling serde_derive v1.0.229 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling thiserror-impl v2.0.21 Compiling tokio-macros v2.7.2 Checking tracing v0.1.44 Compiling futures-macro v0.3.34 Compiling futures-executor v0.3.34 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling openssl v0.10.81 Compiling tokio-stream v0.1.19 Checking foreign-types-shared v0.1.1 Checking zerofrom v0.1.8 Checking foreign-types v0.3.2 Checking yoke v0.8.3 Checking either v1.18.0 Checking serde_urlencoded v0.7.1 Compiling openssl-macros v0.1.1 Compiling hex v0.4.3 Checking zerovec v0.11.8 Checking zerotrie v0.2.5 Compiling dotenvy v0.15.7 Checking arrayvec v0.7.8 Checking rand_core v0.10.1 Compiling getrandom v0.4.3 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-shim) Checking zeroize v1.9.0 Compiling zerocopy v0.8.60 Compiling zerocopy-derive v0.8.60 Checking tinystr v0.8.4 Checking potential_utf v0.1.6 Checking vte v0.15.0 Compiling ring v0.17.14 Checking http v1.5.0 Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-protocol) Checking icu_collections v2.3.0 Checking untrusted v0.9.0 Compiling getrandom v0.3.4 Checking icu_locale_core v2.3.0 Checking rustls-pki-types v1.15.1 Checking uuid v1.27.0 Compiling rustls v0.23.45 Checking cpufeatures v0.3.1 Checking tinyvec v1.13.3 Compiling quinn-udp v0.5.16 Compiling httparse v1.10.1 Compiling num-conv v0.2.2 Checking chacha20 v0.10.2 Compiling icu_provider v2.3.1 Compiling time-core v0.1.9 Checking regex-syntax v0.8.11 Compiling tokio-openssl v0.6.5 Checking minimal-lexical v0.2.1 Compiling thiserror v1.0.69 Checking rand v0.10.3 Compiling time-macros v0.2.32 Checking nom v7.1.3 Checking rand_core v0.9.5 Compiling icu_normalizer v2.3.0 Checking icu_properties v2.3.0 Checking http-body v1.1.0 Checking rand_pcg v0.10.2 Checking regex-automata v0.4.18 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Checking rustls-webpki v0.103.15 Compiling quinn v0.11.12 Checking idna_adapter v1.2.2 Checking deranged v0.5.8 Checking powerfmt v0.2.1 Checking rustc-hash v2.1.3 Checking ppv-lite86 v0.2.21 Checking half v2.7.1 Checking idna v1.1.0 Checking lru-slab v0.1.3 Compiling asn1-rs-derive v0.5.1 Checking rand_chacha v0.9.0 Checking rusticata-macros v4.1.0 Compiling url v2.5.8 Checking time v0.3.55 Checking tokio-util v0.7.19 Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-mesh) Compiling asn1-rs-impl v0.2.0 Checking tower-service v0.3.3 Checking data-encoding v2.11.1 Checking rand v0.9.5 Checking num-integer v0.1.47 Checking try-lock v0.2.5 Compiling oid-registry v0.7.1 Checking sqlx-core v0.8.6 Checking atomic-waker v1.1.2 Checking fnv v1.0.7 Checking lazy_static v1.5.1 Checking httpdate v1.0.3 Checking base64 v0.21.7 Compiling pastey v0.1.1 Checking want v0.3.2 Checking h2 v0.4.19 Checking num-bigint v0.4.8 Checking mime v0.3.17 Compiling rustversion v1.0.23 Checking base64urlsafedata v0.5.5 Checking asn1-rs v0.6.2 Checking quinn-proto v0.11.19 Compiling unicase v2.10.0 Compiling webauthn-attestation-ca v0.5.5 Checking tower-layer v0.3.3 Checking http-body-util v0.1.5 Checking sha1 v0.10.7 Checking sqlx-sqlite v0.8.6 Compiling mime_guess v2.0.5 Compiling fs-err v3.3.2 Compiling webauthn-rs-core v0.5.5 Checking sync_wrapper v1.0.2 Checking der-parser v9.0.0 Checking webauthn-rs-proto v0.5.5 Checking tungstenite v0.29.0 Checking serde_cbor_2 v0.13.0 Checking rand_chacha v0.3.1 Checking hex-conservative v0.2.3 Checking x509-parser v0.16.0 Checking base64ct v1.8.3 Checking tokio-tungstenite v0.29.0 Checking rand v0.8.8 Checking bitcoin_hashes v0.14.101 Checking hyper v1.11.1 Checking password-hash v0.5.0 Checking axum-core v0.5.6 Checking tower v0.5.3 Checking arc-swap v1.9.2 Compiling sqlx-macros-core v0.8.6 Checking sharded-slab v0.1.7 Checking matchers v0.2.0 Checking unicode-normalization v0.1.25 Checking tracing-serde v0.2.0 Checking blake2 v0.10.6 Checking tracing-log v0.2.0 Checking serde_path_to_error v0.1.20 Checking thread_local v1.1.10 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-server) Checking hyper-util v0.1.21 Checking nu-ansi-term v0.50.3 Checking matchit v0.8.4 Checking http-range-header v0.4.2 Checking argon2 v0.5.3 Checking bip39 v2.2.2 Checking utf8parse v0.2.2 Checking anstyle v1.0.14 Checking anstyle-query v1.1.5 Checking tracing-subscriber v0.3.23 Compiling sqlx-macros v0.8.6 Checking tower-http v0.6.11 Checking anstyle-parse v1.0.0 Checking colorchoice v1.0.5 Checking is_terminal_polyfill v1.70.2 Compiling libfuzzer-sys v0.4.13 Checking axum v0.8.9 Checking clap_lex v1.1.1 Checking sqlx v0.8.6 Checking strsim v0.11.1 Compiling clap_derive v4.6.7 Checking arbitrary v1.4.2 Checking inout v0.1.4 Checking anstream v1.0.0 Checking universal-hash v0.5.1 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal) Checking opaque-debug v0.3.1 Checking unicode-width v0.2.2 Checking cipher v0.4.4 Checking infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/infraternal-plugin-api) Checking hmac v0.12.1 Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/plugins/host-facts) Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/audit-ca-update/crates/plugins/mesh) Checking clap_builder v4.6.7 Checking aead v0.5.2 Checking polyval v0.6.2 Compiling crossbeam-epoch v0.9.21 Checking vt100 v0.16.2 Checking hkdf v0.12.4 Compiling crossbeam-deque v0.8.8 Checking ctr v0.9.2 Checking aes v0.8.4 Compiling rayon-core v1.13.0 Checking plotters-backend v0.3.7 Checking ghash v0.5.1 Checking ciborium-io v0.2.2 Checking itertools v0.13.0 Checking same-file v1.0.6 Checking cast v0.3.0 Checking ciborium-ll v0.2.2 Checking plotters-svg v0.3.7 Checking walkdir v2.5.0 Checking regex v1.13.1 Checking aes-gcm v0.10.3 Checking tinytemplate v1.2.1 Checking plotters v0.3.7 Checking ciborium v0.2.2 Checking oorandom v11.1.5 Checking anes v0.1.6 Checking criterion-plot v0.6.0 Checking clap v4.6.7 Checking rayon v1.12.0 Checking criterion v0.7.0 ```

kayg referenced this issue 2026-10-12 03:18:04 +00:00

Add-host bootstrap fails on a NetBird-SSH-only host; failure step not logged #169

kayg commented 2026-10-12 03:22:50 +00:00

Author

Owner

Copy link

Completed/pushed lifecycle recovery 552fbaa2: real probe before shutdown, pinned current-image recovery plus independent CA frame, current-code fallback if both execs refuse. Targeted restart gate 25 passed/0 failed/0 unresolved ignores; optimized measurement is explicitly ignored. Root container real fexec/anonymous socketpair proof passes successful replacement and forced late kernel refusal: PID preserved, listener serves, CA remains unlocked. Rootless proof remains intentionally cold. Receipt root-ca-recovery-with-loader.txt. Probe closed-stdin regression reproduced and fixed by reserving all null descriptors above stdio.
Completed/pushed audited direct child policy a8eb2443, infraternal-agent launch repair 8c7572fb, embedded spawn repair 49ec3b70. Real fd3 test red before/green after; signal/parent mask controls pass. Real baseline anonymous-image terminal.open fails resource_unavailable (anonymous-agent-before-short.txt). Session/embedded suites and all-target clippy pass. Shipping rebuild and final-head full fast gate are running; native runtime gate reuses the integrated dev baseline's recorded three-crate opt-level=1 profile, unchanged release/dependency profiles and old size ceilings. All benchmarking stays local; no deployment or publication.

Completed/pushed lifecycle recovery 552fbaa2: real probe before shutdown, pinned current-image recovery plus independent CA frame, current-code fallback if both execs refuse. Targeted restart gate 25 passed/0 failed/0 unresolved ignores; optimized measurement is explicitly ignored. Root container real fexec/anonymous socketpair proof passes successful replacement and forced late kernel refusal: PID preserved, listener serves, CA remains unlocked. Rootless proof remains intentionally cold. Receipt root-ca-recovery-with-loader.txt. Probe closed-stdin regression reproduced and fixed by reserving all null descriptors above stdio. Completed/pushed audited direct child policy a8eb2443, infraternal-agent launch repair 8c7572fb, embedded spawn repair 49ec3b70. Real fd3 test red before/green after; signal/parent mask controls pass. Real baseline anonymous-image terminal.open fails resource_unavailable (anonymous-agent-before-short.txt). Session/embedded suites and all-target clippy pass. Shipping rebuild and final-head full fast gate are running; native runtime gate reuses the integrated dev baseline's recorded three-crate opt-level=1 profile, unchanged release/dependency profiles and old size ceilings. All benchmarking stays local; no deployment or publication.

kayg commented 2026-10-12 04:09:07 +00:00

Author

Owner

Copy link

Starting D244 implementation on audit-ca-update, base 239da1f488 (earlier diagnostic commits are present with rewritten SHAs). Read repository contract, architecture/process, origin/dev D244 (63dabc80) and all #154 history; no linked parent. Owner selected exact compiler-wrapper argument removal, unchanged OpenSSL source/version. Add a real static release key-memory check under 8MiB, then root/systemd proof on the explicitly authorized perf VM with lock, before/after startup and sizes. No deployment.

Starting D244 implementation on audit-ca-update, base 239da1f4889b5919b3017b14b8a981909f00b44d (earlier diagnostic commits are present with rewritten SHAs). Read repository contract, architecture/process, origin/dev D244 (63dabc80) and all #154 history; no linked parent. Owner selected exact compiler-wrapper argument removal, unchanged OpenSSL source/version. Add a real static release key-memory check under 8MiB, then root/systemd proof on the explicitly authorized perf VM with lock, before/after startup and sizes. No deployment.

kayg commented 2026-10-12 04:12:12 +00:00

Author

Owner

Copy link

D244 regression before repair: scripts/test-musl-cc.py exits 1 because the exact OPENSSL_NO_SECURE_MEMORY argument still reaches the compiler (evidence/ca-static-heap/d244-wrapper-before.txt). The test also requires preserving all other arguments, including the distinct =1 spelling, for both pinned targets and retaining target-override refusal. Existing static size ceilings remain unchanged; the gate will accumulate size failures while still testing both provider builds. The hidden diagnostic requires initialize()==1 even for non-root and creates/imports no keys. Perf VM access/lock probe succeeds; baseline build is underway on infraternal-dev, observed load 47.73/47.97/43.64, no load generators.

D244 regression before repair: scripts/test-musl-cc.py exits 1 because the exact OPENSSL_NO_SECURE_MEMORY argument still reaches the compiler (evidence/ca-static-heap/d244-wrapper-before.txt). The test also requires preserving all other arguments, including the distinct =1 spelling, for both pinned targets and retaining target-override refusal. Existing static size ceilings remain unchanged; the gate will accumulate size failures while still testing both provider builds. The hidden diagnostic requires initialize()==1 even for non-root and creates/imports no keys. Perf VM access/lock probe succeeds; baseline build is underway on infraternal-dev, observed load 47.73/47.97/43.64, no load generators.

kayg commented 2026-10-12 04:22:59 +00:00

Author

Owner

Copy link

D244 validation scope: baseline release binaries are built from 239da1f4's production Rust and unchanged wrapper; the new diagnostic is parked until both baselines finish. Server baseline is expected to refuse as root, so before/after startup reports refusal time versus successful /healthz readiness, not a causal successful-start latency delta. Root proof uses the named perf VM, flock and systemd LimitMEMLOCK=8388608; it reads only public counters and mapping flags, never key bytes or addresses. Static release test executable independently exercises the existing real passkey/encrypted-copy HTTP authority flow and the 10,000-key provider test. The passkey test is an in-process HTTP router proof, distinguished from the standalone production server startup check. Its fixture now follows TMPDIR instead of another job's fixed remote-agents scratch path. No OpenSSL version/source/dependency or security policy changes.

D244 validation scope: baseline release binaries are built from 239da1f4's production Rust and unchanged wrapper; the new diagnostic is parked until both baselines finish. Server baseline is expected to refuse as root, so before/after startup reports refusal time versus successful /healthz readiness, not a causal successful-start latency delta. Root proof uses the named perf VM, flock and systemd LimitMEMLOCK=8388608; it reads only public counters and mapping flags, never key bytes or addresses. Static release test executable independently exercises the existing real passkey/encrypted-copy HTTP authority flow and the 10,000-key provider test. The passkey test is an in-process HTTP router proof, distinguished from the standalone production server startup check. Its fixture now follows TMPDIR instead of another job's fixed remote-agents scratch path. No OpenSSL version/source/dependency or security policy changes.

kayg commented 2026-10-12 04:29:41 +00:00

Author

Owner

Copy link

Completed history reconciliation 331fb34b, pushed audit-ca-update as a fast-forward from published 45828e16. Local job base239da1f4 had rebased the audit onto newer UI content; normal merge preserves both histories with zero indexed/tree changes (git diff239da1f4..331fb34b empty). Formatting and unchanged-tree check pass; no crates touched. Rejected force-push. Both original static baselines continue from the unchanged production source; implementation remains separate.

Completed history reconciliation 331fb34b, pushed audit-ca-update as a fast-forward from published 45828e16. Local job base239da1f4 had rebased the audit onto newer UI content; normal merge preserves both histories with zero indexed/tree changes (git diff239da1f4..331fb34b empty). Formatting and unchanged-tree check pass; no crates touched. Rejected force-push. Both original static baselines continue from the unchanged production source; implementation remains separate.

kayg commented 2026-10-12 04:31:37 +00:00

Author

Owner

Copy link

Original-source x86_64 musl release baseline completed: 20,090,384 bytes (239da1f4 production source, unchanged wrapper/OpenSSL). ARM baseline still builds. The original x86 binary is being exercised on the named perf VM as root under systemd LimitMEMLOCK=8388608 before repair; expected startup refusal will be retained in d244-root-before.txt. Existing x86 size ceiling16,404,816 is already exceeded by3,685,568 bytes before this job's repair; it is not raised.

Original-source x86_64 musl release baseline completed: 20,090,384 bytes (239da1f4 production source, unchanged wrapper/OpenSSL). ARM baseline still builds. The original x86 binary is being exercised on the named perf VM as root under systemd LimitMEMLOCK=8388608 before repair; expected startup refusal will be retained in d244-root-before.txt. Existing x86 size ceiling16,404,816 is already exceeded by3,685,568 bytes before this job's repair; it is not raised.

kayg commented 2026-10-12 04:32:43 +00:00

Author

Owner

Copy link

Real original release x86 server refusal reproduced on infraternal-perf-test as root, holding /var/lock/perf-bench.lock under systemd LimitMEMLOCK=8388608: exit1, state refused, key-memory initialization unavailable before serving. Public output retained in evidence/ca-static-heap/d244-root-before.txt. This is the actual 20,090,384-byte stripped musl server binary, not the prior C diagnostic or a GNU test substitute. Repair not yet applied while the unchanged ARM baseline finishes.

Real original release x86 server refusal reproduced on infraternal-perf-test as root, holding /var/lock/perf-bench.lock under systemd LimitMEMLOCK=8388608: exit1, state refused, key-memory initialization unavailable before serving. Public output retained in evidence/ca-static-heap/d244-root-before.txt. This is the actual 20,090,384-byte stripped musl server binary, not the prior C diagnostic or a GNU test substitute. Repair not yet applied while the unchanged ARM baseline finishes.

kayg commented 2026-10-12 05:01:37 +00:00

Author

Owner

Copy link

Completed/pushed fixture isolation cd70ca5896. Existing CA passkey fixture now follows TMPDIR plus a unique name, rather than another job's fixed scratch path; no production code changes. cargo fmt --all --check and remote server all-target Clippy PASS (2m34s); real passkey HTTP unlock test1PASS/0FAIL (1.76s), evidence d244-fixture-{test,clippy}.txt. Original x86 baseline20090384B/root8MiB refusal already recorded; original ARM baseline still compiles before wrapper removal.

Completed/pushed fixture isolation cd70ca589689f9260f37a4c8dbc023be01c97540. Existing CA passkey fixture now follows TMPDIR plus a unique name, rather than another job's fixed scratch path; no production code changes. cargo fmt --all --check and remote server all-target Clippy PASS (2m34s); real passkey HTTP unlock test1PASS/0FAIL (1.76s), evidence d244-fixture-{test,clippy}.txt. Original x86 baseline20090384B/root8MiB refusal already recorded; original ARM baseline still compiles before wrapper removal.

kayg commented 2026-10-12 05:22:48 +00:00

Author

Owner

Copy link

Completed/pushed hidden diagnostic2615f909 and real CLI integration test (following commit, see branch log). Existing initializer only: success requires return1; root policy unchanged; no key creation/import. fmt/all-target CLI Clippy PASS; real CLI1PASS/0FAIL in0.09s (8MiB ready, ordinary-user zero-limit refused, JSON and hidden help).
Both original release baselines completed without the diagnostic (its unique message is absent): x86_64=20,090,384B; aarch64=17,906,336B. Thus both before/after size comparisons cover the full repair, not just the wrapper. ARM cannot run on this host (x86_64/no qemu-aarch64); no ARM runtime result claimed. New diagnostic against the still-disabled x86 provider is building before wrapper repair.

Completed/pushed hidden diagnostic2615f909 and real CLI integration test (following commit, see branch log). Existing initializer only: success requires return1; root policy unchanged; no key creation/import. fmt/all-target CLI Clippy PASS; real CLI1PASS/0FAIL in0.09s (8MiB ready, ordinary-user zero-limit refused, JSON and hidden help). Both original release baselines completed without the diagnostic (its unique message is absent): x86_64=20,090,384B; aarch64=17,906,336B. Thus both before/after size comparisons cover the full repair, not just the wrapper. ARM cannot run on this host (x86_64/no qemu-aarch64); no ARM runtime result claimed. New diagnostic against the still-disabled x86 provider is building before wrapper repair.

kayg commented 2026-10-12 05:27:18 +00:00

Author

Owner

Copy link

Static release diagnostic red reproduced after adding the diagnostic: hidden __key-memory-check under prlimit8388608 returns exit1/state refused with the still-disabled provider (d244-diagnostic-before.txt). Its GNU CLI limit/JSON/help test passes1/0. D244 wrapper repair now removes exactly -DOPENSSL_NO_SECURE_MEMORY, citing D244/#154; no provider source/version or other flags changed. Wrapper regression now PASS for both targets, preserving =1 spelling/other flags and target-override refusal. Only release openssl-sys outputs are cleaned for both musl targets to avoid stale compiled policy; rebuilding real releases. Atomic production wrapper commit awaits static green evidence. Diagnostic tests committed/pushed at ed6aa196.

Static release diagnostic red reproduced after adding the diagnostic: hidden __key-memory-check under prlimit8388608 returns exit1/state refused with the still-disabled provider (d244-diagnostic-before.txt). Its GNU CLI limit/JSON/help test passes1/0. D244 wrapper repair now removes exactly -DOPENSSL_NO_SECURE_MEMORY, citing D244/#154; no provider source/version or other flags changed. Wrapper regression now PASS for both targets, preserving =1 spelling/other flags and target-override refusal. Only release openssl-sys outputs are cleaned for both musl targets to avoid stale compiled policy; rebuilding real releases. Atomic production wrapper commit awaits static green evidence. Diagnostic tests committed/pushed at ed6aa196.

kayg commented 2026-10-12 05:50:15 +00:00

Author

Owner

Copy link

Completed/pushed wrapper repair c04784b9, exact-policy regression ac60ac3f, and runtime static gate1f82bd17. Fresh x86 real release under8MiB returns1; runtime gate PASS. Both compiler target-policy cases PASS; ARM runtime explicitly untested on this x86 host. No OpenSSL source/version/other options or size caps changed.
Root perf-VM proof (flock, systemd CPUWeight10000/LimitMEMLOCK8388608) PASS:21starts health200; VmLck1024KiB; actual lo+dd mappings1024KiB; zero-limit root server still refuses with IPC_LOCK removed. x86 size20090384->20098960B (+8576).31alternating diagnostic pairs p50 before/after2.684/2.563ms (no causal improvement claim). Baseline server refuses p503.815ms; repaired readiness p5057.143/max153.004ms, incomparable as healthy startup delta. VM4CPUs, load0.01/0.06/0.06 before/after. d244-root-startup.txt. ARM repair build and static-release real CA/passkey/10000-key tests continue. Workspace test compilation and CLI feature-off check pass.

Completed/pushed wrapper repair c04784b9, exact-policy regression ac60ac3f, and runtime static gate1f82bd17. Fresh x86 real release under8MiB returns1; runtime gate PASS. Both compiler target-policy cases PASS; ARM runtime explicitly untested on this x86 host. No OpenSSL source/version/other options or size caps changed. Root perf-VM proof (flock, systemd CPUWeight10000/LimitMEMLOCK8388608) PASS:21starts health200; VmLck1024KiB; actual lo+dd mappings1024KiB; zero-limit root server still refuses with IPC_LOCK removed. x86 size20090384->20098960B (+8576).31alternating diagnostic pairs p50 before/after2.684/2.563ms (no causal improvement claim). Baseline server refuses p503.815ms; repaired readiness p5057.143/max153.004ms, incomparable as healthy startup delta. VM4CPUs, load0.01/0.06/0.06 before/after. d244-root-startup.txt. ARM repair build and static-release real CA/passkey/10000-key tests continue. Workspace test compilation and CLI feature-off check pass.

kayg commented 2026-10-12 06:05:08 +00:00

Author

Owner

Copy link

Owner deployed the release signer Worker from signer-hardening (2f49c526) on 2026-10-12. Smoke check from the build host: GET /pubkey 200 with the ssh-ed25519 public key; POST /sign without a token 401; GET / 404. These checks do not distinguish the new code from the old; the first signed edge release proves it (MANIFEST + MANIFEST.sig present, index row kept).

Owner deployed the release signer Worker from signer-hardening (2f49c526) on 2026-10-12. Smoke check from the build host: GET /pubkey 200 with the ssh-ed25519 public key; POST /sign without a token 401; GET / 404. These checks do not distinguish the new code from the old; the first signed edge release proves it (MANIFEST + MANIFEST.sig present, index row kept).

kayg commented 2026-10-12 06:15:46 +00:00

Author

Owner

Copy link

Completed/pushed root proof reproducer d747b97f. Both repaired releases built/stripped/static/PT_INTERP absent: x8620098960B (+8576), ARM17914528B (+8192) versus pristine reference images; ARM runtime explicitly untested on x86 host.
Root/static release real-engine proofs under8MiB/shared perf lock PASS all3selected cases: imported signer1024KiB locked/832secureB, +32B import/release assertion; real signed-passkey/encrypted-copy HTTP authority unlock;10000live keys320512secureB/drop512B, VmLck1024KiB. VM4CPUs, scale load0.05/0.04/0.01->0.13/0.05/0.01; no load generators. Receipts d244-root-{startup,ca-tests}.txt. No standalone shipping-CLI/browser unlock claim: authority router and production CLI startup are distinct measured paths. Final head fast gate follows evidence/report commit; old ceilings unchanged.

Completed/pushed root proof reproducer d747b97f. Both repaired releases built/stripped/static/PT_INTERP absent: x8620098960B (+8576), ARM17914528B (+8192) versus pristine reference images; ARM runtime explicitly untested on x86 host. Root/static release real-engine proofs under8MiB/shared perf lock PASS all3selected cases: imported signer1024KiB locked/832secureB, +32B import/release assertion; real signed-passkey/encrypted-copy HTTP authority unlock;10000live keys320512secureB/drop512B, VmLck1024KiB. VM4CPUs, scale load0.05/0.04/0.01->0.13/0.05/0.01; no load generators. Receipts d244-root-{startup,ca-tests}.txt. No standalone shipping-CLI/browser unlock claim: authority router and production CLI startup are distinct measured paths. Final head fast gate follows evidence/report commit; old ceilings unchanged.

kayg commented 2026-10-12 06:27:59 +00:00

Author

Owner

Copy link

First final-head fast run (87cb4bac) failed one infraternal-agent test at daemon_gone_tests.rs:98: UnixListener::bind reports path shorter than SUN_LEN. Cause is my job TMPDIR setup: its UUID/session socket pathname is157bytes vs105bytes with normal /tmp (kernel limit108 including NUL). Same unchanged exact test passes with short normal fixture TMPDIR. No product/test assertion/timeout change and no #118 waiver. Cargo targets/worktrees remain job-owned under HOME; only small existing test fixtures use their normal temporary path. Fresh complete head gate is rerunning. Static heap gate PASS; both unchanged size ceilings FAIL as measured; all other first-run rows PASS. Failure, exact retry and fresh head output will be quoted/retained on #154.

First final-head fast run (87cb4bac) failed one infraternal-agent test at daemon_gone_tests.rs:98: UnixListener::bind reports path shorter than SUN_LEN. Cause is my job TMPDIR setup: its UUID/session socket pathname is157bytes vs105bytes with normal /tmp (kernel limit108 including NUL). Same unchanged exact test passes with short normal fixture TMPDIR. No product/test assertion/timeout change and no #118 waiver. Cargo targets/worktrees remain job-owned under HOME; only small existing test fixtures use their normal temporary path. Fresh complete head gate is rerunning. Static heap gate PASS; both unchanged size ceilings FAIL as measured; all other first-run rows PASS. Failure, exact retry and fresh head output will be quoted/retained on #154.

kayg commented 2026-10-12 06:43:19 +00:00

Author

Owner

Copy link

Complete short-TMPDIR gate on D244 source reported302serverPASS/1FAIL/35ignored: existing ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart returned false at ca_bootstrap.rs:340. The same unchanged exact test immediately passes1/0 in0.01s. ca_bootstrap.rs is unchanged versus45828e16; musl-only compiler policy cannot change the GNU test provider. Cause not established; no timing/source/assertion change, no load waiver, no claim that isolated pass fixes the full-run failure. Fresh complete fast gate runs on final documentation head018f0298. Static key-memory gate PASS; both old size caps remain FAIL. Failure and isolated output retained in own scratch and will be included in finish evidence.

Complete short-TMPDIR gate on D244 source reported302serverPASS/1FAIL/35ignored: existing ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart returned false at ca_bootstrap.rs:340. The same unchanged exact test immediately passes1/0 in0.01s. ca_bootstrap.rs is unchanged versus45828e16; musl-only compiler policy cannot change the GNU test provider. Cause not established; no timing/source/assertion change, no load waiver, no claim that isolated pass fixes the full-run failure. Fresh complete fast gate runs on final documentation head018f0298. Static key-memory gate PASS; both old size caps remain FAIL. Failure and isolated output retained in own scratch and will be included in finish evidence.

kayg commented 2026-10-12 07:02:16 +00:00

Author

Owner

Copy link

Finished D244 on audit-ca-update, head018f0298fc05b4e449f5d93567ba72d1def1d789, all10atomic/history/evidence steps pushed. Worktree clean; no deployment/issue closure. Exact musl compiler disable argument removed; provider version/sources/other flags and root refusal unchanged. Hidden key-free release diagnostic and native8MiB runtime gate landed.

Real root/perf-VM proof:21starts health200, VmLck1024KiB and actual lo+dd1024KiB; zero-memlock root still refused. Static-release imported signer/passkey/10000-key proofs3PASS;10000keys320512secureB/drop512B, one1MiB heap/server. Startup readiness p5057.143/max153.004ms; before server refused (not a healthy latency baseline).31alternating diagnostic p502.684->2.563ms, no causal improvement claim. VM4CPUs, startup load0.01/0.06/0.06.

Full shipping size x8620090384->20098960B (+8576), ARM17906336->17914528B (+8192); stripped/static/PT_INTERP absent. ARM runtime explicitly untested on x86 host. Old ceilings remain unchanged and exceeded on both before images.

Final branch-head scripts/verify fast exit1 solely for existing size caps. fmt/VT fmt/Clippy/test/deny PASS;303serverPASS/0FAIL/35ignored; new x86 key heap checkPASS. Supplemental TS157/36PASS, production transfer/font budgetsPASS. Earlier long-TMPDIR setup failure157vs105byte socket fixed by normal small-fixture path, no source/assertion change. One earlier unchanged bootstrap verification assertion failed; isolated1/0 and final complete gatePASS, cause unestablished, no waiver. Prior failure output is preserved below. No benchmarks/load generators ran outside the authorized VM; no secrets inspected/emitted.

Report: docs/verification/ca-static-heap/README.md. Root/source/build receipts: evidence/ca-static-heap/d244-*.txt; reproducers run-d244-root.sh/run_d244_root.py. Author checklist complete; independent review remains orchestrator work. Owned VM uploads removed; own local scratch cleanup follows. Full final gate output is quoted verbatim in numbered continuation comments.

Verbatim final Rust summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Finished D244 on audit-ca-update, head018f0298fc05b4e449f5d93567ba72d1def1d789, all10atomic/history/evidence steps pushed. Worktree clean; no deployment/issue closure. Exact musl compiler disable argument removed; provider version/sources/other flags and root refusal unchanged. Hidden key-free release diagnostic and native8MiB runtime gate landed. Real root/perf-VM proof:21starts health200, VmLck1024KiB and actual lo+dd1024KiB; zero-memlock root still refused. Static-release imported signer/passkey/10000-key proofs3PASS;10000keys320512secureB/drop512B, one1MiB heap/server. Startup readiness p5057.143/max153.004ms; before server refused (not a healthy latency baseline).31alternating diagnostic p502.684->2.563ms, no causal improvement claim. VM4CPUs, startup load0.01/0.06/0.06. Full shipping size x8620090384->20098960B (+8576), ARM17906336->17914528B (+8192); stripped/static/PT_INTERP absent. ARM runtime explicitly untested on x86 host. Old ceilings remain unchanged and exceeded on both before images. Final branch-head scripts/verify fast exit1 solely for existing size caps. fmt/VT fmt/Clippy/test/deny PASS;303serverPASS/0FAIL/35ignored; new x86 key heap checkPASS. Supplemental TS157/36PASS, production transfer/font budgetsPASS. Earlier long-TMPDIR setup failure157vs105byte socket fixed by normal small-fixture path, no source/assertion change. One earlier unchanged bootstrap verification assertion failed; isolated1/0 and final complete gatePASS, cause unestablished, no waiver. Prior failure output is preserved below. No benchmarks/load generators ran outside the authorized VM; no secrets inspected/emitted. Report: docs/verification/ca-static-heap/README.md. Root/source/build receipts: evidence/ca-static-heap/d244-*.txt; reproducers run-d244-root.sh/run_d244_root.py. Author checklist complete; independent review remains orchestrator work. Owned VM uploads removed; own local scratch cleanup follows. Full final gate output is quoted verbatim in numbered continuation comments. Verbatim final Rust summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-12 07:03:12 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part1/7 (exit1: old size caps only). Concatenate code-block contents in order.

Running as unit: run-p887726-i9275323.scope; invocation ID: 735b375a48e04d98914da4642c4da979
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=317.15 p99_ms=343.30 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.64s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.03s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal-90fe82a6b3d59be8)

running 41 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ignored, unresolved P2 UP-02: opened inode can be rewritten before exec; run explicitly
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ignored, unresolved P1 UP-01: signature hook accepts unsigned replacement; run explicitly
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ignored, unresolved P1 UP-03: exec failure shuts down the running service; run explicitly
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 38 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 9.51s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_daemon-d42d86a1fe9be4ef)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.92s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_queues-a021ec1acb3b3974)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.77s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_review-b109dc8c0ea4448a)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.63s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_sessions-51194cc1ad11f060)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/idle_canary-2954b36cc04b68cf)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/key_memory-96f797b91fb9551a)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/remote_output-7a63ec36fdc42d04)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/session_bounds_review-f381e04914a71be3)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/session_retention-872dbdc68c802169)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.60s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/shim-6f50c01a34844ce2)

running 13 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.91s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/ssh_askpass-157e04a7fc7a4e10)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/vt_credit-1abd0a7d7cdd2cf3)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.78s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/vt_reconnect-5711ec4b49249e36)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.91s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_agent-3f7a0f2ea26ce26b)

running 66 tests
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 10.88s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/transport-7aefc420416659fc)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.59s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 8 tests
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_remote-dbc730f0a98d7ae8)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.56s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_ssh-22c74ae6b401f3c9)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/auth_order-744d04f93707f5ba)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/build_removal-dba195f2ccd51d46)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/concurrency-567f2b3209b3d51a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/config_isolation-c8555d6ef13a9d9c)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/credentials-a02d677719e12c57)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/diagnostics-a642b26a9490dbef)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/event_metadata-c5bbe67ae20be921)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/foreground-22ec946b08d93ce7)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/host_trust-dcf5ed7cf6caf11b)

running 2 tests

Final head018f0298 scripts/verify fast, verbatim output part1/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text Running as unit: run-p887726-i9275323.scope; invocation ID: 735b375a48e04d98914da4642c4da979 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=317.15 p99_ms=343.30 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.64s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.03s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal-90fe82a6b3d59be8) running 41 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ignored, unresolved P2 UP-02: opened inode can be rewritten before exec; run explicitly test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ignored, unresolved P1 UP-01: signature hook accepts unsigned replacement; run explicitly test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ignored, unresolved P1 UP-03: exec failure shuts down the running service; run explicitly test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 38 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 9.51s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_daemon-d42d86a1fe9be4ef) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.92s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_queues-a021ec1acb3b3974) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.77s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_review-b109dc8c0ea4448a) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 40.63s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/agent_sessions-51194cc1ad11f060) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/idle_canary-2954b36cc04b68cf) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/key_memory-96f797b91fb9551a) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/remote_output-7a63ec36fdc42d04) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/session_bounds_review-f381e04914a71be3) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/session_retention-872dbdc68c802169) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.60s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/shim-6f50c01a34844ce2) running 13 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.91s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/ssh_askpass-157e04a7fc7a4e10) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/vt_credit-1abd0a7d7cdd2cf3) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.78s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/vt_reconnect-5711ec4b49249e36) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.91s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_agent-3f7a0f2ea26ce26b) running 66 tests test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 10.88s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/transport-7aefc420416659fc) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.59s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 8 tests test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_remote-dbc730f0a98d7ae8) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.56s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_plugin_ssh-22c74ae6b401f3c9) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/auth_order-744d04f93707f5ba) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/build_removal-dba195f2ccd51d46) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/concurrency-567f2b3209b3d51a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/config_isolation-c8555d6ef13a9d9c) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/credentials-a02d677719e12c57) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/diagnostics-a642b26a9490dbef) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/event_metadata-c5bbe67ae20be921) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/foreground-22ec946b08d93ce7) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/host_trust-dcf5ed7cf6caf11b) running 2 tests ```

kayg commented 2026-10-12 07:03:20 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part2/7 (exit1: old size caps only). Concatenate code-block contents in order.

test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/install-bf33190c5e4a8f5b)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.84s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/model-1a416449815ab54c)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/probe_check-493058442c42e74a)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/process-4491e71fb8358cf3)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/proxy_policy-30b27e9a0eaf7feb)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/real_ssh-2b6f699fa75f5e16)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/single_connection-e97d45463f57ad78)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/source_completeness-0d8606df6a5ada25)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/trust_round2-a58eb97831fbeafe)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_server-685b52a1e40e250a)

running 338 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok

Final head018f0298 scripts/verify fast, verbatim output part2/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/install-bf33190c5e4a8f5b) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.84s Running tests/model.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/model-1a416449815ab54c) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/probe_check-493058442c42e74a) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/process.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/process-4491e71fb8358cf3) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/proxy_policy-30b27e9a0eaf7feb) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/real_ssh-2b6f699fa75f5e16) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/single_connection-e97d45463f57ad78) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/source_completeness-0d8606df6a5ada25) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/trust_round2-a58eb97831fbeafe) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_server-685b52a1e40e250a) running 338 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok ```

kayg commented 2026-10-12 07:03:27 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part3/7 (exit1: old size caps only). Concatenate code-block contents in order.

test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 303 passed; 0 failed; 35 ignored; 0 measured; 0 filtered out; finished in 423.14s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/catalog_startup-a9efe034d9f2a261)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/enrollment-af272401b8c9d4f0)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 4.09s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_parser-8a67b2a39f6f7035)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_plugin-90d8c709cba8975d)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_policy-fc28f342e279d379)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_role_scope-1953c5dedb623e17)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/plugin_host_review-59b0efd5d2c41a33)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.59s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/plugin_settings_review-8eff33044b5ef657)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.85s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/remote_plugin_contract-65fddbff582d4e39)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.90s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_shim-8bfb29dafc6ac962)

running 78 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.03s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 83.66s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/detach-faf5ac0ef89968b5)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.32s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mouse-b7389260a793b88e)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.46s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)

Final head018f0298 scripts/verify fast, verbatim output part3/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 303 passed; 0 failed; 35 ignored; 0 measured; 0 filtered out; finished in 423.14s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/catalog_startup-a9efe034d9f2a261) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/enrollment-af272401b8c9d4f0) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 4.09s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_parser-8a67b2a39f6f7035) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_plugin-90d8c709cba8975d) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_policy-fc28f342e279d379) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mesh_review_role_scope-1953c5dedb623e17) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/plugin_host_review-59b0efd5d2c41a33) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.59s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/plugin_settings_review-8eff33044b5ef657) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.85s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/remote_plugin_contract-65fddbff582d4e39) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.90s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/infraternal_shim-8bfb29dafc6ac962) running 78 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.03s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 83.66s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/detach-faf5ac0ef89968b5) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.32s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/audit-ca-update/target/debug/deps/mouse-b7389260a793b88e) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.46s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) ```

kayg commented 2026-10-12 07:03:33 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part4/7 (exit1: old size caps only). Concatenate code-block contents in order.

         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5

Final head018f0298 scripts/verify fast, verbatim output part4/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 ```

kayg commented 2026-10-12 07:03:42 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part5/7 (exit1: old size caps only). Concatenate code-block contents in order.

          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6

Final head018f0298 scripts/verify fast, verbatim output part5/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 ```

kayg commented 2026-10-12 07:03:44 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part6/7 (exit1: old size caps only). Concatenate code-block contents in order.

      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)

Final head018f0298 scripts/verify fast, verbatim output part6/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) ```

kayg commented 2026-10-12 07:03:45 +00:00

Author

Owner

Copy link

Final head018f0298 scripts/verify fast, verbatim output part7/7 (exit1: old size caps only). Concatenate code-block contents in order.

      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
    Finished `release` profile [optimized] target(s) in 1.14s
/home/kayg/.cache/codex-scratch/audit-ca-update/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 20098960 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20098960 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Command
  State   ready
  Detail  Key memory initialization=1; locked pages and dump exclusion enabled
  Next    Run this check under an 8 MiB memlock limit.
    Finished `release` profile [optimized] target(s) in 0.79s
/home/kayg/.cache/codex-scratch/audit-ca-update/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 17914528 bytes (baseline 13555672 + allowance 262144 = max 13817816)
binary exceeds the 13817816-byte size budget: 17914528 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
server subcommand: exit 2, not implemented
agent subcommand: exit 2, not implemented

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final head018f0298 scripts/verify fast, verbatim output part7/7 (exit1: old size caps only). Concatenate code-block contents in order. ```text │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/audit-ca-update/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused Finished `release` profile [optimized] target(s) in 1.14s /home/kayg/.cache/codex-scratch/audit-ca-update/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 20098960 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20098960 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Command State ready Detail Key memory initialization=1; locked pages and dump exclusion enabled Next Run this check under an 8 MiB memlock limit. Finished `release` profile [optimized] target(s) in 0.79s /home/kayg/.cache/codex-scratch/audit-ca-update/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 17914528 bytes (baseline 13555672 + allowance 262144 = max 13817816) binary exceeds the 13817816-byte size budget: 17914528 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) server subcommand: exit 2, not implemented agent subcommand: exit 2, not implemented +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-12 07:03:49 +00:00

Author

Owner

Copy link

Final head018f0298 supplemental TS phase (exit0), verbatim output:

Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed.
Running as unit: run-p1028065-i9415662.scope; invocation ID: 54b36ba8a28b47ffab696f2e1c97b32d

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [112.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [38.55ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [57.96ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [2.56ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.16ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.39ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.42ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.26ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.59ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [5.04ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.24ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.45ms]
(pass) repeating the front item changes nothing [0.08ms]
(pass) the list is capped, so the oldest items fall off [0.07ms]
(pass) top skips items that are no longer live, without losing them [0.10ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.30ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.08ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.21ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.33ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.42ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.36ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.20ms]
(pass) before facts arrive the host's platform names the header [0.08ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.10ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.09ms]
(pass) without `access` (today's server) the person may view and may not edit [5.63ms]
(pass) fields the server does not send are absent, never invented [0.29ms]
(pass) anything that is not a list is refused, whole [15.74ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.27ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [7.25ms]
(pass) answers carry the new revision, and a create the new arrow's id [6.03ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.21ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.30ms]
(pass) the layout is deterministic and does not depend on input order [18.76ms]
(pass) no two cards overlap, and every card lies inside the graph [75.57ms]
(pass) the sheet is wider than tall, roughly 16:10 [10.81ms]
(pass) a pinned node stays where it was put and the others do not move [12.47ms]
(pass) a pin beyond the sheet grows the graph [0.55ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms]
(pass) 1,000 nodes lay out in a few milliseconds [63.06ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.47ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.23ms]
(pass) a view taller than the viewport is scaled down so it fits [0.06ms]
(pass) nearestStop picks the stop whose centre is closest [0.22ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.26ms]
(pass) a small graph keeps one stop per node column [0.11ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.09ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.12ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [6.63ms]
(pass) closing the new half gives the layout back exactly, in the model [2.63ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.43ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.32ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.74ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.73ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.22ms]
(pass) new window right opens a full-size column after the whole group, never inside it [5.05ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.24ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.21ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [203.76ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.70ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.30ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.19ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.82ms]
(pass) a chain of neighbours is pushed in turn [0.20ms]
(pass) snapping rounds to whole cells [0.09ms]
(pass) reach follows grants through tags and keeps the relay [0.45ms]
(pass) a phone column in a strip leaves PEEK px of each neighbour at the edge; a lone window keeps 99% [0.39ms]
(pass) a desktop column is the same alone and in a strip [0.04ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) inventory remembers a remote session and refuses a cross-host attach [1.73ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [2.40ms]
(pass) a detected operating system supplies the live popover mark [3.58ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [4.55ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.81ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.72ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [3.97ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.38ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [2.23ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.94ms]
(pass) product copy names the host and counters and never renders untrusted server text [6.56ms]
(pass) oversized refusal JSON is ignored before parsing [0.31ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.77ms]
(pass) a document survives JSON and rebuilds the same columns [7.06ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.40ms]
(pass) parseDocument rejects anything that is not a document of this format [0.60ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.38ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.57ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.43ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.09ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.51ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.11ms]
(pass) parsing the server's data > an install command needs a lifetime [0.08ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [4.38ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [1.13ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [9.76ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [3.61ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.70ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.21ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.56ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [2.07ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [1.71ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.36ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.26ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.19ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.33ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.34ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.14ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms]
(pass) authLabel > names the method and a trusted network provider only [0.08ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.25ms]
(pass) guideFor > each failure kind names its fix [0.16ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.29ms]
(pass) parseTarget > refuses what cannot name a host [0.10ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.72ms]
(pass) parseSshConfig > recognises config text [0.13ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.06ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.18ms]
(pass) only a completed canonical host identity becomes terminal authority [0.17ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.29ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.22ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.07ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.12ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.10ms]
(pass) install diagnostics name the failed step and public host error [0.32ms]
(pass) missing payload tells the operator the architecture and expected server path [0.18ms]
(pass) an already added host says so and offers opening its existing terminal [0.14ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [1.04ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.56ms]
(pass) ready CA begins the requested installation mode without another prompt [0.20ms]
(pass) closing during CA confirmation never starts an SSH attempt [3.28ms]
(pass) a typed root login requires explicit consent before any installation [0.36ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.86ms]
(pass) motion follows elapsed time across frame rates and damping regimes [2.97ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.98ms]
(pass) a chunk that both sides use stays critical [0.46ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.29ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [18.19ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [7.43ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [7.88ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [101.54ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [82.67ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [35.12ms]
(pass) abandoned word acknowledgement uploads nothing [13.27ms]
(pass) settled acknowledgement cannot upload later (dismissed) [14.04ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [13.36ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [5.43ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [7.60ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.65ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.74ms]
(pass) malformed or excessive remaining wait -1 is denied [5.00ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.34ms]
(pass) malformed or excessive remaining wait 172801 is denied [6.13ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [8.26ms]
(pass) malformed or excessive remaining wait 90000 is denied [14.31ms]

 157 pass
 0 fail
 11290 expect() calls
Ran 157 tests across 26 files. [1318.00ms]
$ bun run build.ts
built chunk-q2nxayqq.js, chunk-atqxstac.js, chunk-vz8669mg.js, chunk-8st0nrym.js, chunk-hzsy8p26.js, chunk-89ccban2.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-0fqfvzg0.js, chunk-0bgntzya.js, chunk-wpq1v3ny.js, chunk-5s6a3m50.js, main.js, chunk-hna59wqc.js, chunk-p3wfa4x0.js, chunk-rqn6pfk3.js, chunk-7jtj0yf3.js, chunk-75r19h9d.js, chunk-ybs9dq57.js, chunk-6pr41fr9.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-xqnbw1pm.js, chunk-axbkkqp1.js, chunk-dwsa1krt.js, chunk-tg5bpy8f.js, chunk-kd6zph3r.js, chunk-2amcmwp2.js, chunk-fdg778tj.js, chunk-v2gdetrx.js, chunk-edvvnds4.js, chunk-w95jc5eg.js, chunk-dhgce5d0.js, chunk-esaftw3s.js, chunk-fkh64cka.js, chunk-hj3s01cx.js, chunk-j8d3pyy7.js, chunk-wkqeh53w.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-wza0x11c.js, chunk-nm1z0gca.js, chunk-g8gacvxa.js, chunk-49h9jxrs.js, chunk-nyyaknbs.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-chm9x95c.js, chunk-f2r0hhqc.js, chunk-9nd0far1.js, chunk-mrjrswdq.js, chunk-p2f3j79s.js
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-esaftw3s.js: identity=5359 gzip=2578 brotli=2298 bytes
critical chunk-hna59wqc.js: identity=8377 gzip=3574 brotli=3181 bytes
deferred chunk-8st0nrym.js: identity=42967 gzip=16560 brotli=14585 bytes
onDemand chunk-tg5bpy8f.js: identity=6198 gzip=2793 brotli=2521 bytes
critical chunk-rqn6pfk3.js: identity=5443 gzip=2604 brotli=2382 bytes
onDemand chunk-p3wfa4x0.js: identity=2557 gzip=1180 brotli=1010 bytes
onDemand chunk-xqnbw1pm.js: identity=1026 gzip=622 brotli=496 bytes
onDemand chunk-fkh64cka.js: identity=4640 gzip=1930 brotli=1702 bytes
onDemand chunk-wkqeh53w.js: identity=10496 gzip=4091 brotli=3740 bytes
critical chunk-p2f3j79s.js: identity=42395 gzip=14486 brotli=12973 bytes
critical chunk-chm9x95c.js: identity=9810 gzip=4016 brotli=3452 bytes
critical chunk-7jtj0yf3.js: identity=15859 gzip=6178 brotli=5477 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=487 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes
critical chunk-dwsa1krt.js: identity=703957 gzip=203922 brotli=165201 bytes
onDemand chunk-wpq1v3ny.js: identity=5760 gzip=1907 brotli=1688 bytes
onDemand chunk-edvvnds4.js: identity=1170 gzip=706 brotli=620 bytes
onDemand chunk-w95jc5eg.js: identity=540 gzip=350 brotli=311 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
deferred chunk-v2gdetrx.js: identity=94999 gzip=32315 brotli=28583 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
onDemand chunk-hzsy8p26.js: identity=3891 gzip=1735 brotli=1516 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-fdg778tj.js: identity=1616 gzip=863 brotli=739 bytes
onDemand chunk-2amcmwp2.js: identity=4575 gzip=2014 brotli=1801 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-nm1z0gca.js: identity=162 gzip=150 brotli=148 bytes
critical chunk-6pr41fr9.js: identity=2519 gzip=1008 brotli=876 bytes
onDemand chunk-nyyaknbs.js: identity=2428 gzip=1082 brotli=913 bytes
onDemand chunk-vz8669mg.js: identity=5745 gzip=2164 brotli=1917 bytes
onDemand chunk-0fqfvzg0.js: identity=2420 gzip=1198 brotli=1080 bytes
onDemand chunk-g8gacvxa.js: identity=6773 gzip=3176 brotli=2894 bytes
critical chunk-atqxstac.js: identity=2943 gzip=1315 brotli=1126 bytes
critical chunk-q2nxayqq.js: identity=21235 gzip=6859 brotli=6134 bytes
onDemand chunk-wza0x11c.js: identity=47781 gzip=15015 brotli=13346 bytes
onDemand chunk-dhgce5d0.js: identity=11529 gzip=4651 brotli=4249 bytes
onDemand chunk-kd6zph3r.js: identity=2824 gzip=1386 brotli=1202 bytes
critical chunk-mrjrswdq.js: identity=199 gzip=161 brotli=139 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
critical chunk-75r19h9d.js: identity=17627 gzip=6248 brotli=5571 bytes
onDemand chunk-j8d3pyy7.js: identity=13384 gzip=5026 brotli=4498 bytes
critical chunk-89ccban2.js: identity=707 gzip=367 brotli=307 bytes
critical main.js: identity=110306 gzip=40145 brotli=34827 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-0bgntzya.js: identity=191 gzip=170 brotli=131 bytes
onDemand chunk-49h9jxrs.js: identity=31922 gzip=12259 brotli=11030 bytes
critical chunk-ybs9dq57.js: identity=590 gzip=327 brotli=321 bytes
onDemand chunk-9nd0far1.js: identity=1063 gzip=652 brotli=519 bytes
onDemand chunk-hj3s01cx.js: identity=7662 gzip=3397 brotli=2963 bytes
JavaScript transfer, critical: identity=945381 gzip=293449/307200 brotli=243950/256000 bytes
JavaScript transfer, deferred: identity=137966 gzip=48875/51200 brotli=43168/45056 bytes
JavaScript transfer, onDemand: identity=183886 gzip=72160/20480 brotli=64218/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-wza0x11c.js: gzip=15015/20480 brotli=13346/18432 bytes (class total gzip=72160 brotli=64218, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [10.84ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.53ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.22ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.19ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.21ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [10.15ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.18ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.97ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.21ms]
(pass) split mux header preserves trailing Close [0.23ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [4.58ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.29ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.84ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.62ms]
(pass) superseded failure preserves a newer pending refresh [7.18ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4710.98ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [15.92ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [7.00ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.54ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.20ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.78ms]
(pass) review continuation stops after forbidden [1.29ms]
(pass) review continuation stops after superseded [5.20ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.45ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.21ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.50ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [1.59ms]
(pass) watch never publishes a partial page; withdrawn=true [2.96ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.77ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.34ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [3.37ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [6.59ms]
(pass) shared Mesh event vectors drive the typed watch adapter [15.69ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [4.89s]

Final head018f0298 supplemental TS phase (exit0), verbatim output: ```text Scope command line contains environment variable, which is not expanded by default for now, but will be expanded by default in the future. Use --expand-environment=yes/no to explicitly control it as needed. Running as unit: run-p1028065-i9415662.scope; invocation ID: 54b36ba8a28b47ffab696f2e1c97b32d ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [112.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [38.55ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [57.96ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [2.56ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.16ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.39ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.42ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.26ms] (pass) FrameDetector > fps, p95 and window read the ring [0.59ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [5.04ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.24ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.45ms] (pass) repeating the front item changes nothing [0.08ms] (pass) the list is capped, so the oldest items fall off [0.07ms] (pass) top skips items that are no longer live, without losing them [0.10ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.30ms] (pass) recentRows: a view with three windows and no use shows them in order [0.08ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.21ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.33ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.42ms] (pass) extended info on: every fact sits under System, Resources or Access [0.36ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.20ms] (pass) before facts arrive the host's platform names the header [0.08ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.10ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.09ms] (pass) without `access` (today's server) the person may view and may not edit [5.63ms] (pass) fields the server does not send are absent, never invented [0.29ms] (pass) anything that is not a list is refused, whole [15.74ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.27ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [7.25ms] (pass) answers carry the new revision, and a create the new arrow's id [6.03ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.21ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.30ms] (pass) the layout is deterministic and does not depend on input order [18.76ms] (pass) no two cards overlap, and every card lies inside the graph [75.57ms] (pass) the sheet is wider than tall, roughly 16:10 [10.81ms] (pass) a pinned node stays where it was put and the others do not move [12.47ms] (pass) a pin beyond the sheet grows the graph [0.55ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms] (pass) 1,000 nodes lay out in a few milliseconds [63.06ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.47ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.23ms] (pass) a view taller than the viewport is scaled down so it fits [0.06ms] (pass) nearestStop picks the stop whose centre is closest [0.22ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.26ms] (pass) a small graph keeps one stop per node column [0.11ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.09ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.12ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [6.63ms] (pass) closing the new half gives the layout back exactly, in the model [2.63ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.43ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.32ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.74ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.73ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.22ms] (pass) new window right opens a full-size column after the whole group, never inside it [5.05ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.24ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.21ms] (pass) random sequences of split right, split down, new window right and close never break the grid [203.76ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.70ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.30ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.19ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.82ms] (pass) a chain of neighbours is pushed in turn [0.20ms] (pass) snapping rounds to whole cells [0.09ms] (pass) reach follows grants through tags and keeps the relay [0.45ms] (pass) a phone column in a strip leaves PEEK px of each neighbour at the edge; a lone window keeps 99% [0.39ms] (pass) a desktop column is the same alone and in a strip [0.04ms] src/canvas/sessions/live-inventory.test.ts: (pass) inventory remembers a remote session and refuses a cross-host attach [1.73ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [2.40ms] (pass) a detected operating system supplies the live popover mark [3.58ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [4.55ms] (pass) unknown and ambiguous labels never open an embedded shell [0.81ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.72ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [3.97ms] (pass) a known retired status survives repeated selection and generic ended answers [0.38ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [2.23ms] (pass) legacy refusals still work and malformed counters never reach the message [0.94ms] (pass) product copy names the host and counters and never renders untrusted server text [6.56ms] (pass) oversized refusal JSON is ignored before parsing [0.31ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.77ms] (pass) a document survives JSON and rebuilds the same columns [7.06ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.40ms] (pass) parseDocument rejects anything that is not a document of this format [0.60ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.38ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.57ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.43ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.09ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.51ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.11ms] (pass) parsing the server's data > an install command needs a lifetime [0.08ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [4.38ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [1.13ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [9.76ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [3.61ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.70ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.21ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.56ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [2.07ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [1.71ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.36ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.26ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.19ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.33ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.34ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.14ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms] (pass) authLabel > names the method and a trusted network provider only [0.08ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.25ms] (pass) guideFor > each failure kind names its fix [0.16ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.29ms] (pass) parseTarget > refuses what cannot name a host [0.10ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.72ms] (pass) parseSshConfig > recognises config text [0.13ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.06ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.18ms] (pass) only a completed canonical host identity becomes terminal authority [0.17ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.29ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.22ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.07ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.12ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.10ms] (pass) install diagnostics name the failed step and public host error [0.32ms] (pass) missing payload tells the operator the architecture and expected server path [0.18ms] (pass) an already added host says so and offers opening its existing terminal [0.14ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [1.04ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.56ms] (pass) ready CA begins the requested installation mode without another prompt [0.20ms] (pass) closing during CA confirmation never starts an SSH attempt [3.28ms] (pass) a typed root login requires explicit consent before any installation [0.36ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.86ms] (pass) motion follows elapsed time across frame rates and damping regimes [2.97ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.98ms] (pass) a chunk that both sides use stays critical [0.46ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.29ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [18.19ms] (pass) compiled recovery UI mode preview obeys its URL boundary [7.43ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [7.88ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [101.54ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [82.67ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [35.12ms] (pass) abandoned word acknowledgement uploads nothing [13.27ms] (pass) settled acknowledgement cannot upload later (dismissed) [14.04ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [13.36ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [5.43ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [7.60ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.65ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.74ms] (pass) malformed or excessive remaining wait -1 is denied [5.00ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.34ms] (pass) malformed or excessive remaining wait 172801 is denied [6.13ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [8.26ms] (pass) malformed or excessive remaining wait 90000 is denied [14.31ms] 157 pass 0 fail 11290 expect() calls Ran 157 tests across 26 files. [1318.00ms] $ bun run build.ts built chunk-q2nxayqq.js, chunk-atqxstac.js, chunk-vz8669mg.js, chunk-8st0nrym.js, chunk-hzsy8p26.js, chunk-89ccban2.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-0fqfvzg0.js, chunk-0bgntzya.js, chunk-wpq1v3ny.js, chunk-5s6a3m50.js, main.js, chunk-hna59wqc.js, chunk-p3wfa4x0.js, chunk-rqn6pfk3.js, chunk-7jtj0yf3.js, chunk-75r19h9d.js, chunk-ybs9dq57.js, chunk-6pr41fr9.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-xqnbw1pm.js, chunk-axbkkqp1.js, chunk-dwsa1krt.js, chunk-tg5bpy8f.js, chunk-kd6zph3r.js, chunk-2amcmwp2.js, chunk-fdg778tj.js, chunk-v2gdetrx.js, chunk-edvvnds4.js, chunk-w95jc5eg.js, chunk-dhgce5d0.js, chunk-esaftw3s.js, chunk-fkh64cka.js, chunk-hj3s01cx.js, chunk-j8d3pyy7.js, chunk-wkqeh53w.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-wza0x11c.js, chunk-nm1z0gca.js, chunk-g8gacvxa.js, chunk-49h9jxrs.js, chunk-nyyaknbs.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-chm9x95c.js, chunk-f2r0hhqc.js, chunk-9nd0far1.js, chunk-mrjrswdq.js, chunk-p2f3j79s.js critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-esaftw3s.js: identity=5359 gzip=2578 brotli=2298 bytes critical chunk-hna59wqc.js: identity=8377 gzip=3574 brotli=3181 bytes deferred chunk-8st0nrym.js: identity=42967 gzip=16560 brotli=14585 bytes onDemand chunk-tg5bpy8f.js: identity=6198 gzip=2793 brotli=2521 bytes critical chunk-rqn6pfk3.js: identity=5443 gzip=2604 brotli=2382 bytes onDemand chunk-p3wfa4x0.js: identity=2557 gzip=1180 brotli=1010 bytes onDemand chunk-xqnbw1pm.js: identity=1026 gzip=622 brotli=496 bytes onDemand chunk-fkh64cka.js: identity=4640 gzip=1930 brotli=1702 bytes onDemand chunk-wkqeh53w.js: identity=10496 gzip=4091 brotli=3740 bytes critical chunk-p2f3j79s.js: identity=42395 gzip=14486 brotli=12973 bytes critical chunk-chm9x95c.js: identity=9810 gzip=4016 brotli=3452 bytes critical chunk-7jtj0yf3.js: identity=15859 gzip=6178 brotli=5477 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=487 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes critical chunk-dwsa1krt.js: identity=703957 gzip=203922 brotli=165201 bytes onDemand chunk-wpq1v3ny.js: identity=5760 gzip=1907 brotli=1688 bytes onDemand chunk-edvvnds4.js: identity=1170 gzip=706 brotli=620 bytes onDemand chunk-w95jc5eg.js: identity=540 gzip=350 brotli=311 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes deferred chunk-v2gdetrx.js: identity=94999 gzip=32315 brotli=28583 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes onDemand chunk-hzsy8p26.js: identity=3891 gzip=1735 brotli=1516 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-fdg778tj.js: identity=1616 gzip=863 brotli=739 bytes onDemand chunk-2amcmwp2.js: identity=4575 gzip=2014 brotli=1801 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes critical chunk-nm1z0gca.js: identity=162 gzip=150 brotli=148 bytes critical chunk-6pr41fr9.js: identity=2519 gzip=1008 brotli=876 bytes onDemand chunk-nyyaknbs.js: identity=2428 gzip=1082 brotli=913 bytes onDemand chunk-vz8669mg.js: identity=5745 gzip=2164 brotli=1917 bytes onDemand chunk-0fqfvzg0.js: identity=2420 gzip=1198 brotli=1080 bytes onDemand chunk-g8gacvxa.js: identity=6773 gzip=3176 brotli=2894 bytes critical chunk-atqxstac.js: identity=2943 gzip=1315 brotli=1126 bytes critical chunk-q2nxayqq.js: identity=21235 gzip=6859 brotli=6134 bytes onDemand chunk-wza0x11c.js: identity=47781 gzip=15015 brotli=13346 bytes onDemand chunk-dhgce5d0.js: identity=11529 gzip=4651 brotli=4249 bytes onDemand chunk-kd6zph3r.js: identity=2824 gzip=1386 brotli=1202 bytes critical chunk-mrjrswdq.js: identity=199 gzip=161 brotli=139 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes critical chunk-75r19h9d.js: identity=17627 gzip=6248 brotli=5571 bytes onDemand chunk-j8d3pyy7.js: identity=13384 gzip=5026 brotli=4498 bytes critical chunk-89ccban2.js: identity=707 gzip=367 brotli=307 bytes critical main.js: identity=110306 gzip=40145 brotli=34827 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-0bgntzya.js: identity=191 gzip=170 brotli=131 bytes onDemand chunk-49h9jxrs.js: identity=31922 gzip=12259 brotli=11030 bytes critical chunk-ybs9dq57.js: identity=590 gzip=327 brotli=321 bytes onDemand chunk-9nd0far1.js: identity=1063 gzip=652 brotli=519 bytes onDemand chunk-hj3s01cx.js: identity=7662 gzip=3397 brotli=2963 bytes JavaScript transfer, critical: identity=945381 gzip=293449/307200 brotli=243950/256000 bytes JavaScript transfer, deferred: identity=137966 gzip=48875/51200 brotli=43168/45056 bytes JavaScript transfer, onDemand: identity=183886 gzip=72160/20480 brotli=64218/18432 bytes JavaScript transfer, onDemand largest chunk chunk-wza0x11c.js: gzip=15015/20480 brotli=13346/18432 bytes (class total gzip=72160 brotli=64218, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [10.84ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.53ms] (pass) subscription not found ends delivery before a late refresh rejection [1.22ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.19ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms] (pass) synchronous subscription refusal releases the transport exactly once [0.21ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [10.15ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.18ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.97ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.21ms] (pass) split mux header preserves trailing Close [0.23ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [4.58ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.29ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.84ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.62ms] (pass) superseded failure preserves a newer pending refresh [7.18ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4710.98ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [15.92ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [7.00ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.54ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.20ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.78ms] (pass) review continuation stops after forbidden [1.29ms] (pass) review continuation stops after superseded [5.20ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.45ms] (pass) a changed revision discards earlier pages before assembling its restart [0.21ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.50ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [1.59ms] (pass) watch never publishes a partial page; withdrawn=true [2.96ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.77ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.34ms] (pass) authoritative resync keeps priority over an equal-revision pending list [3.37ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [6.59ms] (pass) shared Mesh event vectors drive the typed watch adapter [15.69ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [4.89s] ```

kayg commented 2026-10-12 07:03:51 +00:00

Author

Owner

Copy link

Retained earlier unchanged bootstrap full-run failure (not the final-head outcome; no causal explanation/waiver). Its exact isolated retry1PASS/0FAIL and final full303serverPASS/0FAIL. ca_bootstrap.rs unchanged versus45828e16. Failure excerpt, verbatim:

---- ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart stdout ----

thread 'ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart' (852391) panicked at crates/infraternal-server/src/ca_bootstrap.rs:340:9:
assertion failed: openssl::x509::X509StoreContext::new().unwrap().init(&trust.build(),
        &identity.certificate, &chain,
        openssl::x509::X509StoreContextRef::verify_cert).unwrap()
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Retained earlier unchanged bootstrap full-run failure (not the final-head outcome; no causal explanation/waiver). Its exact isolated retry1PASS/0FAIL and final full303serverPASS/0FAIL. ca_bootstrap.rs unchanged versus45828e16. Failure excerpt, verbatim: ```text ---- ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart stdout ---- thread 'ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart' (852391) panicked at crates/infraternal-server/src/ca_bootstrap.rs:340:9: assertion failed: openssl::x509::X509StoreContext::new().unwrap().init(&trust.build(), &identity.certificate, &chain, openssl::x509::X509StoreContextRef::verify_cert).unwrap() note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace ```

kayg commented 2026-10-12 07:06:42 +00:00

Author

Owner

Copy link

Cleanup complete at018f0298fc05b4e449f5d93567ba72d1def1d789, pushed audit-ca-update. Only owned local scratch targets/fixtures/uploads and owned named-VM files removed; shared VM directory retained. Worktree clean and remote matches HEAD. Final branch-head fast output preserved verbatim in7numbered comments plus supplemental TS output; only unchanged static-size ceilings fail. Bootstrap transient cause remains unestablished but exact retry and final complete gate pass; no source/assertion/timeout change or waiver. Report/evidence committed; no deployment or issue closure. Initial forced-delete cleanup was rejected automatically; non-forced owned-directory deletion succeeded.

Cleanup complete at018f0298fc05b4e449f5d93567ba72d1def1d789, pushed audit-ca-update. Only owned local scratch targets/fixtures/uploads and owned named-VM files removed; shared VM directory retained. Worktree clean and remote matches HEAD. Final branch-head fast output preserved verbatim in7numbered comments plus supplemental TS output; only unchanged static-size ceilings fail. Bootstrap transient cause remains unestablished but exact retry and final complete gate pass; no source/assertion/timeout change or waiver. Report/evidence committed; no deployment or issue closure. Initial forced-delete cleanup was rejected automatically; non-forced owned-directory deletion succeeded.

kayg commented 2026-10-12 07:10:20 +00:00

Author

Owner

Copy link

Final cleanup verification: non-forced deletion finished, both owned local scratch roots absent, worktree clean at018f0298fc05b4e449f5d93567ba72d1def1d789. Earlier cleanup comment was posted while the large deletion was still completing; absence is verified now. All final-head gate/TS output is preserved on #154; committed source/report/root evidence retained. No deployment or issue closure.

Final cleanup verification: non-forced deletion finished, both owned local scratch roots absent, worktree clean at018f0298fc05b4e449f5d93567ba72d1def1d789. Earlier cleanup comment was posted while the large deletion was still completing; absence is verified now. All final-head gate/TS output is preserved on #154; committed source/report/root evidence retained. No deployment or issue closure.

kayg commented 2026-10-12 08:11:12 +00:00

Author

Owner

Copy link

Starting independent delta review on review-audit-ca-update at 018f0298fc; prior review base b0cf61ef, target/dev merge base 93b00f5ab9. Read #154 history (217 comments), no linked parent; continuing custody-only scope and settled/deferred UP-01/02/03. Preserved previous review as review-audit-ca-update-prior-018f. Reviewing only delta excluding dev merges, replaying prior custody regressions. No push/deploy/perf VM; no build-host timing evidence.

Starting independent delta review on review-audit-ca-update at 018f0298fc05b4e449f5d93567ba72d1def1d789; prior review base b0cf61ef, target/dev merge base 93b00f5ab965949b1a76a808e5734f98fed82fd4. Read #154 history (217 comments), no linked parent; continuing custody-only scope and settled/deferred UP-01/02/03. Preserved previous review as review-audit-ca-update-prior-018f. Reviewing only delta excluding dev merges, replaying prior custody regressions. No push/deploy/perf VM; no build-host timing evidence.

kayg commented 2026-10-12 08:14:06 +00:00

Author

Owner

Copy link

Completed independent D244 compiler-policy verification at local review commit a29a41b6. Both x86_64/aarch64 policy cases PASS, retaining =1 and whitespace arguments and refusing foreign target overrides; shell syntax/diff PASS. Evidence evidence/review-audit-ca-update/delta-018f/. Six code/test/gate files differ from b0cf61ef after excluding dev merges; no dependency/contract delta. Target-head full fast gate still compiling. No push/deployment/perf VM or build-host performance claims.

Completed independent D244 compiler-policy verification at local review commit a29a41b6. Both x86_64/aarch64 policy cases PASS, retaining =1 and whitespace arguments and refusing foreign target overrides; shell syntax/diff PASS. Evidence evidence/review-audit-ca-update/delta-018f/. Six code/test/gate files differ from b0cf61ef after excluding dev merges; no dependency/contract delta. Target-head full fast gate still compiling. No push/deployment/perf VM or build-host performance claims.

kayg commented 2026-10-12 08:14:50 +00:00

Author

Owner

Copy link

Scope clarification: current delta brief explicitly requests replaying earlier failing tests and stating whether each passes. Will replay UP-01/02/03 as well as custody controls; older custody-only deferral will be reported separately, not treated as a fix. Current verdict rule requires HOLD if confirmed P0/P1 remain. Historical RV-CA-01 data/check will be retained but cannot establish current latency: perf VM is expressly prohibited and shared-host timing is not evidence. No unchanged-code re-audit beyond requested prior regressions.

Scope clarification: current delta brief explicitly requests replaying earlier failing tests and stating whether each passes. Will replay UP-01/02/03 as well as custody controls; older custody-only deferral will be reported separately, not treated as a fix. Current verdict rule requires HOLD if confirmed P0/P1 remain. Historical RV-CA-01 data/check will be retained but cannot establish current latency: perf VM is expressly prohibited and shared-host timing is not evidence. No unchanged-code re-audit beyond requested prior regressions.

kayg commented 2026-10-12 08:22:34 +00:00

Author

Owner

Copy link

Replayed historical RV-CA-01 evidence/test in local commit eda5f3cd (cherry-pick of 1f20bc0c). The preserved five-pair nonregression assertion still FAILS against its original data; this is not a new timing measurement or a verification of current release latency. No current performance claim is made because this review forbids the perf VM. Full target-head Cargo gate remains untouched by these evidence-only files.

Replayed historical RV-CA-01 evidence/test in local commit eda5f3cd (cherry-pick of 1f20bc0c). The preserved five-pair nonregression assertion still FAILS against its original data; this is not a new timing measurement or a verification of current release latency. No current performance claim is made because this review forbids the perf VM. Full target-head Cargo gate remains untouched by these evidence-only files.

kayg commented 2026-10-12 08:25:05 +00:00

Author

Owner

Copy link

Restored original independent UP regressions as bf798631/5be04ff8/181b71a1 and fixture lint correction dab9edfc; custody release/principal/cold-signing/log assertions as 0ce6cffe/48fcb4e8/a13b47b4. All are test-only cherry-picks; production delta remains exactly018f0298. Native cold build still in progress. Since source tests were restored during dependency compilation, the running fast gate is now target production plus reviewer tests, not a pristine-target-only test-count claim. Explicit deferred-regression execution follows compilation. No push/deployment.

Restored original independent UP regressions as bf798631/5be04ff8/181b71a1 and fixture lint correction dab9edfc; custody release/principal/cold-signing/log assertions as 0ce6cffe/48fcb4e8/a13b47b4. All are test-only cherry-picks; production delta remains exactly018f0298. Native cold build still in progress. Since source tests were restored during dependency compilation, the running fast gate is now target production plus reviewer tests, not a pristine-target-only test-count claim. Explicit deferred-regression execution follows compilation. No push/deployment.

kayg commented 2026-10-12 08:28:13 +00:00

Author

Owner

Copy link

Restored original full-mapping release observer as027afa9e (cherry-pick f15ab9cb). Observer builds with -Wall -Wextra -Werror; replayed Rust sources pass formatting. Runtime observation awaits native test binary. Native VT build has completed; full gate continues through Clippy. Prior artifacts remain labelled historical; fresh replay output will be stored in delta-018f. No push/deployment.

Restored original full-mapping release observer as027afa9e (cherry-pick f15ab9cb). Observer builds with -Wall -Wextra -Werror; replayed Rust sources pass formatting. Runtime observation awaits native test binary. Native VT build has completed; full gate continues through Clippy. Prior artifacts remain labelled historical; fresh replay output will be stored in delta-018f. No push/deployment.

kayg commented 2026-10-12 08:34:10 +00:00

Author

Owner

Copy link

Gate setup correction: first owned gate interrupted (exit143) after Clippy PASS while native test executables were compiling; inherited umask002 did not match prior documented022 executable fixtures. Retained verify-first-umask002.txt. Owned executable artifacts made non-group-writable; replay runs now use022 and short fixture root. First corrected unweighted retry exited1 at network RTT self-test before Rust rows (verify-umask022-unweighted.txt), no waiver. Unchanged full gate restarted under CPUWeight10000, serial tests, port4384. No product/assertion/deadline changes or performance claims.

Gate setup correction: first owned gate interrupted (exit143) after Clippy PASS while native test executables were compiling; inherited umask002 did not match prior documented022 executable fixtures. Retained verify-first-umask002.txt. Owned executable artifacts made non-group-writable; replay runs now use022 and short fixture root. First corrected unweighted retry exited1 at network RTT self-test before Rust rows (verify-umask022-unweighted.txt), no waiver. Unchanged full gate restarted under CPUWeight10000, serial tests, port4384. No product/assertion/deadline changes or performance claims.

kayg commented 2026-10-12 08:37:31 +00:00

Author

Owner

Copy link

UP-01 P1 earlier finding revalidated at target018f0298: 2/2 real ELF fixtures admitted without valid release authentication;0 executed. Existing independent test restart_binary::review_tests::reviewer_real_elf_requires_release_authentication still FAILS (exit101). Source crates/infraternal/src/restart_binary.rs:94; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_real_elf_requires_release_authentication.txt, local commit 99b5290f. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

UP-01 P1 earlier finding revalidated at target018f0298: 2/2 real ELF fixtures admitted without valid release authentication;0 executed. Existing independent test restart_binary::review_tests::reviewer_real_elf_requires_release_authentication still FAILS (exit101). Source crates/infraternal/src/restart_binary.rs:94; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_real_elf_requires_release_authentication.txt, local commit 99b5290f. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

kayg commented 2026-10-12 08:37:32 +00:00

Author

Owner

Copy link

UP-02 P2 earlier finding revalidated at target018f0298: durable in-place write changes the retained ELF header. Existing independent test restart_binary::review_tests::reviewer_admitted_elf_header_cannot_be_superseded still FAILS (exit101). Source crates/infraternal/src/restart_binary.rs:82; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_admitted_elf_header_cannot_be_superseded.txt, local commit ed1593fb. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

UP-02 P2 earlier finding revalidated at target018f0298: durable in-place write changes the retained ELF header. Existing independent test restart_binary::review_tests::reviewer_admitted_elf_header_cannot_be_superseded still FAILS (exit101). Source crates/infraternal/src/restart_binary.rs:82; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_admitted_elf_header_cannot_be_superseded.txt, local commit ed1593fb. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

kayg commented 2026-10-12 08:37:33 +00:00

Author

Owner

Copy link

UP-03 P1 earlier finding revalidated at target018f0298: existing listener is available before replacement and unavailable after actual exec refusal. Existing independent test restart_binary::review_tests::reviewer_exec_refusal_preserves_existing_listener still FAILS (exit101). Source crates/infraternal/src/restart.rs:378; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_exec_refusal_preserves_existing_listener.txt, local commit 331e0a26. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

UP-03 P1 earlier finding revalidated at target018f0298: existing listener is available before replacement and unavailable after actual exec refusal. Existing independent test restart_binary::review_tests::reviewer_exec_refusal_preserves_existing_listener still FAILS (exit101). Source crates/infraternal/src/restart.rs:378; test crates/infraternal/src/restart_review_tests.rs; fresh evidence evidence/review-audit-ca-update/delta-018f/reviewer_exec_refusal_preserves_existing_listener.txt, local commit 331e0a26. No new delta defect or implementation fix. Current brief explicitly requires prior-finding replay and HOLD if P0/P1 remain; earlier custody-only deferral is reported separately. No push/deployment.

kayg commented 2026-10-12 08:42:23 +00:00

Author

Owner

Copy link

Fresh independent custody controls PASS, local evidence commit above (see branch log):3independent tests (two principals30starts each; cold public trust needs new real administrator proof and verifies restored signature; provider seed clears only on final reference), strengthened four-outcome audit test1PASS, full-intake observer1PASS with2entire mappings cleared before munmap. Evidence delta-018f/{custody-replay,audit-log-replay,intake-observer-replay}.txt. These are functional GNU tests, not new performance/static/root claims. Full fast gate retained a fixture-parent setup failure before server tests; empty ignored target/ now exists, unchanged retry and complete rerun required. Static builds continue. UP-01/03 earlierP1 and UP-02P2 remain confirmed; no new delta finding.

Fresh independent custody controls PASS, local evidence commit above (see branch log):3independent tests (two principals30starts each; cold public trust needs new real administrator proof and verifies restored signature; provider seed clears only on final reference), strengthened four-outcome audit test1PASS, full-intake observer1PASS with2entire mappings cleared before munmap. Evidence delta-018f/{custody-replay,audit-log-replay,intake-observer-replay}.txt. These are functional GNU tests, not new performance/static/root claims. Full fast gate retained a fixture-parent setup failure before server tests; empty ignored target/ now exists, unchanged retry and complete rerun required. Static builds continue. UP-01/03 earlierP1 and UP-02P2 remain confirmed; no new delta finding.

kayg commented 2026-10-12 08:44:10 +00:00

Author

Owner

Copy link

Custody evidence commit is a99c2f41. After creating the ignored fixture parent, unchanged exact initial_attach test PASS1/0; no waiver/assertion change. Final pristine-target source gate started: temporarily restored four reviewer import/log-test files from018f0298 so native test set and source are exactly the target, with unused reviewer modules retained on disk and committed in HEAD. Will restore review imports from HEAD after gate. Final log verify-final.txt; umask022, serial tests, CPUWeight10000, short owned fixture root, port4384. Existing first gate still compiles static targets; no production changes, push/deployment or VM use.

Custody evidence commit is a99c2f41. After creating the ignored fixture parent, unchanged exact initial_attach test PASS1/0; no waiver/assertion change. Final pristine-target source gate started: temporarily restored four reviewer import/log-test files from018f0298 so native test set and source are exactly the target, with unused reviewer modules retained on disk and committed in HEAD. Will restore review imports from HEAD after gate. Final log verify-final.txt; umask022, serial tests, CPUWeight10000, short owned fixture root, port4384. Existing first gate still compiles static targets; no production changes, push/deployment or VM use.

kayg commented 2026-10-12 08:48:33 +00:00

Author

Owner

Copy link

Pristine-target fast gate native test row FAIL: existing local_session_counts_and_memory_refusals_follow_real_lifecycle, scripts/verify-session-bounds.py:63, dead shim exceeded one-second retirement bound. Full log verify-final.txt; own static compilation overlaps. This case is outside listed#118 exceptions: no waiver, no causal claim, no deadline/assertion change. Require unchanged retry and fresh complete gate after own builds stop. Static shipping/provider compilation continues; earlier UP-01/03P1 remain independently confirmed.

Pristine-target fast gate native test row FAIL: existing local_session_counts_and_memory_refusals_follow_real_lifecycle, scripts/verify-session-bounds.py:63, dead shim exceeded one-second retirement bound. Full log verify-final.txt; own static compilation overlaps. This case is outside listed#118 exceptions: no waiver, no causal claim, no deadline/assertion change. Require unchanged retry and fresh complete gate after own builds stop. Static shipping/provider compilation continues; earlier UP-01/03P1 remain independently confirmed.

kayg commented 2026-10-12 08:51:50 +00:00

Author

Owner

Copy link

Fresh actual x86_64 musl shipping CLI D244 PASS:8MiB diagnostic ready/exit0;zero memlock refused/exit1;both JSON records fixed/no stderr;public help omits hidden command. Image20098960B, stripped/static; matches author after size and+8576B vs earlier20090384B reference. Evidence static-x86-check.json, new local commit (branch log; SHA follows in finish). No root/whole-server/ARM/runtime/performance remeasurement claim. ARM compilation continues. Current fast attempts retain fixture-parent failure then unchanged retirement-deadline failure; neither waived. Final native gate requires rerun once own static builds stop.

Fresh actual x86_64 musl shipping CLI D244 PASS:8MiB diagnostic ready/exit0;zero memlock refused/exit1;both JSON records fixed/no stderr;public help omits hidden command. Image20098960B, stripped/static; matches author after size and+8576B vs earlier20090384B reference. Evidence static-x86-check.json, new local commit (branch log; SHA follows in finish). No root/whole-server/ARM/runtime/performance remeasurement claim. ARM compilation continues. Current fast attempts retain fixture-parent failure then unchanged retirement-deadline failure; neither waived. Final native gate requires rerun once own static builds stop.

kayg commented 2026-10-12 09:21:36 +00:00

Author

Owner

Copy link

x86 receipt commit c7119ea8; ARM receipt now committed separately. Both fresh shipping sizes match author:20098960B/17914528B; static, stripped,PT_INTERP absent. Independent hashes retained; x86 hash differs from author receipt, so root receipt is not claimed as proof of this independently rebuilt image. Strict x868MiB/zero-limit checks PASS; ARM native runtime not checked. Feature-disabled cargo check PASS. Both earlier full fast attempts finish with testFAIL101 (documented fixture parent, then unchanged retirement deadline) and old sizeFAIL1; no waiver. Own compilation stopped; unchanged retirement retry and fresh pristine-target complete gate are now running without own build overlap. No push/deployment/perf VM.

x86 receipt commit c7119ea8; ARM receipt now committed separately. Both fresh shipping sizes match author:20098960B/17914528B; static, stripped,PT_INTERP absent. Independent hashes retained; x86 hash differs from author receipt, so root receipt is not claimed as proof of this independently rebuilt image. Strict x868MiB/zero-limit checks PASS; ARM native runtime not checked. Feature-disabled cargo check PASS. Both earlier full fast attempts finish with testFAIL101 (documented fixture parent, then unchanged retirement deadline) and old sizeFAIL1; no waiver. Own compilation stopped; unchanged retirement retry and fresh pristine-target complete gate are now running without own build overlap. No push/deployment/perf VM.

kayg commented 2026-10-12 09:50:55 +00:00

Author

Owner

Copy link

Finished independent delta review: HOLD (P0/P1 present); verdict: do not merge under the current brief's rule. Target 018f0298; prior reviewed b0cf61ef; local review branch review-audit-ca-update, head aa7a10710d. New delta findings: P0 0 / P1 0 / P2 0 / P3 0. Earlier findings: P0 0 / P1 2 / P2 2 / P3 0; one P2 is historical and not remeasured.

UP-01 and UP-03 still FAIL, each exit 101: two real ELF fixtures admitted without valid release authentication (0 executed), and actual exec refusal removes the prior listener. UP-02 still FAILS after a durable write changes the admitted ELF header. Tests and fresh failures committed separately (bf798631/5be04ff8/181b71a1; evidence 99b5290f/ed1593fb/331e0a26). The earlier custody-only deferral is recorded separately; the current brief explicitly requests prior-finding replay and prohibits merge with P0/P1.

RV-CA-01's original-data nonregression check still FAILS; current performance was not remeasured because this brief prohibits the perf VM and host timings are not performance evidence. Independent custody controls PASS (a99c2f41): principal isolation, new administrator proof after cold reconstruction with verified signing, final-reference seed clearing, four outcomes excluding private encodings, and full intake clearing before release.

D244 shipping checks PASS on the fresh x86 musl CLI under 8 MiB; zero memlock is refused; help omits the diagnostic (c7119ea8). Fresh stripped/static images: x86 20,098,960 B / ARM 17,914,528 B; no PT_INTERP; match author sizes (+8,576 / +8,192 against prior references, not rebuilt here). Independent artifact hashes are retained; the x86 hash differs from the author receipt. No root whole-server or native ARM runtime claim. ARM receipt 1c23f342. Both-target wrapper policy, feature-off check and reviewer formatting PASS.

Final complete scripts/verify fast on pristine target source: 303 server PASS / 0 FAIL / 35 ignored; every non-size Rust row PASS, unchanged static ceilings only FAIL. Earlier setup and retirement failures plus unchanged passing retries are retained; no deadline/assertion/implementation/ceiling change or #118 waiver. Reviewer imports restored afterward. Gate archive 5f45b228; report/checklist docs/verification/review-audit-ca-update/delta-018f.md; evidence evidence/review-audit-ca-update/delta-018f/.

Verbatim final gate summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Full final target-source gate output follows verbatim in numbered parts. No implementation fix, push, deployment, perf VM, credential investigation or issue closure. Owned scratch cleanup follows evidence archival.

Finished independent delta review: **HOLD (P0/P1 present); verdict: do not merge under the current brief's rule.** Target 018f0298; prior reviewed b0cf61ef; local review branch review-audit-ca-update, head aa7a10710d2fc40452ef4c40cd4cab2a129bdbf2. New delta findings: P0 0 / P1 0 / P2 0 / P3 0. Earlier findings: P0 0 / P1 2 / P2 2 / P3 0; one P2 is historical and not remeasured. UP-01 and UP-03 still FAIL, each exit 101: two real ELF fixtures admitted without valid release authentication (0 executed), and actual exec refusal removes the prior listener. UP-02 still FAILS after a durable write changes the admitted ELF header. Tests and fresh failures committed separately (bf798631/5be04ff8/181b71a1; evidence 99b5290f/ed1593fb/331e0a26). The earlier custody-only deferral is recorded separately; the current brief explicitly requests prior-finding replay and prohibits merge with P0/P1. RV-CA-01's original-data nonregression check still FAILS; current performance was not remeasured because this brief prohibits the perf VM and host timings are not performance evidence. Independent custody controls PASS (a99c2f41): principal isolation, new administrator proof after cold reconstruction with verified signing, final-reference seed clearing, four outcomes excluding private encodings, and full intake clearing before release. D244 shipping checks PASS on the fresh x86 musl CLI under 8 MiB; zero memlock is refused; help omits the diagnostic (c7119ea8). Fresh stripped/static images: x86 20,098,960 B / ARM 17,914,528 B; no PT_INTERP; match author sizes (+8,576 / +8,192 against prior references, not rebuilt here). Independent artifact hashes are retained; the x86 hash differs from the author receipt. No root whole-server or native ARM runtime claim. ARM receipt 1c23f342. Both-target wrapper policy, feature-off check and reviewer formatting PASS. Final complete scripts/verify fast on pristine target source: 303 server PASS / 0 FAIL / 35 ignored; every non-size Rust row PASS, unchanged static ceilings only FAIL. Earlier setup and retirement failures plus unchanged passing retries are retained; no deadline/assertion/implementation/ceiling change or #118 waiver. Reviewer imports restored afterward. Gate archive 5f45b228; report/checklist docs/verification/review-audit-ca-update/delta-018f.md; evidence evidence/review-audit-ca-update/delta-018f/. Verbatim final gate summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Full final target-source gate output follows verbatim in numbered parts. No implementation fix, push, deployment, perf VM, credential investigation or issue closure. Owned scratch cleanup follows evidence archival.

kayg commented 2026-10-12 09:50:57 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 1/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

Running as unit: run-p2663358-i11050913.scope; invocation ID: 5dea1d8affec4bef82904e9964a90ba8
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.62 p99_ms=311.78 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.97s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.35s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal-90fe82a6b3d59be8)

running 41 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ignored, unresolved P2 UP-02: opened inode can be rewritten before exec; run explicitly
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ignored, unresolved P1 UP-01: signature hook accepts unsigned replacement; run explicitly
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ignored, unresolved P1 UP-03: exec failure shuts down the running service; run explicitly
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 38 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 8.46s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_daemon-d42d86a1fe9be4ef)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.43s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_queues-a021ec1acb3b3974)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.08s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_review-b109dc8c0ea4448a)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.37s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_sessions-51194cc1ad11f060)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/idle_canary-2954b36cc04b68cf)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/key_memory-96f797b91fb9551a)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/remote_output-7a63ec36fdc42d04)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/session_bounds_review-f381e04914a71be3)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.25s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/session_retention-872dbdc68c802169)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.72s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/shim-6f50c01a34844ce2)

running 13 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.58s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/ssh_askpass-157e04a7fc7a4e10)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/vt_credit-1abd0a7d7cdd2cf3)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.70s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/vt_reconnect-5711ec4b49249e36)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.16s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_agent-3f7a0f2ea26ce26b)

running 66 tests
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 11.57s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/transport-7aefc420416659fc)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.78s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 8 tests
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_remote-dbc730f0a98d7ae8)

running 12 tests
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.19s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_ssh-22c74ae6b401f3c9)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... 
running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/auth_order-744d04f93707f5ba)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/build_removal-dba195f2ccd51d46)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.17s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/concurrency-567f2b3209b3d51a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/config_isolation-c8555d6ef13a9d9c)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/credentials-a02d677719e12c57)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/diagnostics-a642b26a9490dbef)

running 5 tests
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/event_metadata-c5bbe67ae20be921)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/foreground-22ec946b08d93ce7)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

Final pristine target 018f0298 scripts/verify fast, verbatim output part 1/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text Running as unit: run-p2663358-i11050913.scope; invocation ID: 5dea1d8affec4bef82904e9964a90ba8 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.62 p99_ms=311.78 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.97s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.35s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal-90fe82a6b3d59be8) running 41 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ignored, unresolved P2 UP-02: opened inode can be rewritten before exec; run explicitly test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ignored, unresolved P1 UP-01: signature hook accepts unsigned replacement; run explicitly test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ignored, unresolved P1 UP-03: exec failure shuts down the running service; run explicitly test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 38 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 8.46s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_daemon-d42d86a1fe9be4ef) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.43s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_queues-a021ec1acb3b3974) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.08s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_review-b109dc8c0ea4448a) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.37s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/agent_sessions-51194cc1ad11f060) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/idle_canary-2954b36cc04b68cf) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/key_memory-96f797b91fb9551a) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/remote_output-7a63ec36fdc42d04) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/session_bounds_review-f381e04914a71be3) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.25s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/session_retention-872dbdc68c802169) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.72s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/shim-6f50c01a34844ce2) running 13 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.58s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/ssh_askpass-157e04a7fc7a4e10) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/vt_credit-1abd0a7d7cdd2cf3) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.70s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/vt_reconnect-5711ec4b49249e36) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.16s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_agent-3f7a0f2ea26ce26b) running 66 tests test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 11.57s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/transport-7aefc420416659fc) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.78s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 8 tests test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_remote-dbc730f0a98d7ae8) running 12 tests test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.19s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_plugin_ssh-22c74ae6b401f3c9) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/auth_order-744d04f93707f5ba) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/build_removal-dba195f2ccd51d46) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.17s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/concurrency-567f2b3209b3d51a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/config_isolation-c8555d6ef13a9d9c) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/credentials-a02d677719e12c57) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/diagnostics-a642b26a9490dbef) running 5 tests test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/event_metadata-c5bbe67ae20be921) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/foreground-22ec946b08d93ce7) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok ```

kayg commented 2026-10-12 09:51:00 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 2/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/host_trust-dcf5ed7cf6caf11b)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/install-bf33190c5e4a8f5b)

running 29 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.44s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/model-1a416449815ab54c)

running 4 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/probe_check-493058442c42e74a)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/process-4491e71fb8358cf3)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/proxy_policy-30b27e9a0eaf7feb)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/real_ssh-2b6f699fa75f5e16)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/single_connection-e97d45463f57ad78)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/source_completeness-0d8606df6a5ada25)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/trust_round2-a58eb97831fbeafe)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_server-685b52a1e40e250a)

running 338 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok

Final pristine target 018f0298 scripts/verify fast, verbatim output part 2/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/host_trust-dcf5ed7cf6caf11b) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/install-bf33190c5e4a8f5b) running 29 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.44s Running tests/model.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/model-1a416449815ab54c) running 4 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/probe_check-493058442c42e74a) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/process.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/process-4491e71fb8358cf3) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/proxy_policy-30b27e9a0eaf7feb) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/real_ssh-2b6f699fa75f5e16) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/single_connection-e97d45463f57ad78) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/source_completeness-0d8606df6a5ada25) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/trust_round2-a58eb97831fbeafe) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_server-685b52a1e40e250a) running 338 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok ```

kayg commented 2026-10-12 09:51:01 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 3/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 303 passed; 0 failed; 35 ignored; 0 measured; 0 filtered out; finished in 462.95s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/catalog_startup-a9efe034d9f2a261)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/enrollment-af272401b8c9d4f0)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.60s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_parser-8a67b2a39f6f7035)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_plugin-90d8c709cba8975d)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_policy-fc28f342e279d379)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_role_scope-1953c5dedb623e17)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/plugin_host_review-59b0efd5d2c41a33)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/plugin_settings_review-8eff33044b5ef657)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/remote_plugin_contract-65fddbff582d4e39)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_shim-8bfb29dafc6ac962)

running 78 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.01s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 103.66s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/detach-faf5ac0ef89968b5)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.37s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mouse-b7389260a793b88e)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.21s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6

Final pristine target 018f0298 scripts/verify fast, verbatim output part 3/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 303 passed; 0 failed; 35 ignored; 0 measured; 0 filtered out; finished in 462.95s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/catalog_startup-a9efe034d9f2a261) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/enrollment-af272401b8c9d4f0) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.60s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_parser-8a67b2a39f6f7035) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_plugin-90d8c709cba8975d) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_policy-fc28f342e279d379) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mesh_review_role_scope-1953c5dedb623e17) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/plugin_host_review-59b0efd5d2c41a33) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/plugin_settings_review-8eff33044b5ef657) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/remote_plugin_contract-65fddbff582d4e39) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/infraternal_shim-8bfb29dafc6ac962) running 78 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.01s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 103.66s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/detach-faf5ac0ef89968b5) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.37s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/debug/deps/mouse-b7389260a793b88e) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.21s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ```

kayg commented 2026-10-12 09:51:02 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 4/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9

Final pristine target 018f0298 scripts/verify fast, verbatim output part 4/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 ```

kayg commented 2026-10-12 09:51:03 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 5/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)

Final pristine target 018f0298 scripts/verify fast, verbatim output part 5/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) ```

kayg commented 2026-10-12 09:51:04 +00:00

Author

Owner

Copy link

Final pristine target 018f0298 scripts/verify fast, verbatim output part 6/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence.

      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 3.97s
/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 20098960 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20098960 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Command
  State   ready
  Detail  Key memory initialization=1; locked pages and dump exclusion enabled
  Next    Run this check under an 8 MiB memlock limit.
    Finished `release` profile [optimized] target(s) in 2.08s
/home/kayg/.cache/codex-scratch/audit-ca-update-review/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 17914528 bytes (baseline 13555672 + allowance 262144 = max 13817816)
binary exceeds the 13817816-byte size budget: 17914528 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
server subcommand: exit 2, not implemented
agent subcommand: exit 2, not implemented

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final pristine target 018f0298 scripts/verify fast, verbatim output part 6/6 (exit 1: unchanged size ceilings only). Framework timings are not performance evidence. ```text │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-audit-ca-update/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 3.97s /home/kayg/.cache/codex-scratch/audit-ca-update-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 20098960 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20098960 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Command State ready Detail Key memory initialization=1; locked pages and dump exclusion enabled Next Run this check under an 8 MiB memlock limit. Finished `release` profile [optimized] target(s) in 2.08s /home/kayg/.cache/codex-scratch/audit-ca-update-review/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 17914528 bytes (baseline 13555672 + allowance 262144 = max 13817816) binary exceeds the 13817816-byte size budget: 17914528 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) server subcommand: exit 2, not implemented agent subcommand: exit 2, not implemented +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented 2026-10-12 10:02:53 +00:00

Author

Owner

Copy link

Cleanup verified: owned audit-ca-update-review scratch root is absent; review worktree is clean at aa7a10710d. Durable tests/report/evidence are committed locally, findings.md appended, and full final pristine-target gate output is preserved in six numbered #154 comments. Verdict remains HOLD: two earlier P1 failures remain, no new delta finding. No push, deployment, perf VM or issue closure.

Cleanup verified: owned audit-ca-update-review scratch root is absent; review worktree is clean at aa7a10710d2fc40452ef4c40cd4cab2a129bdbf2. Durable tests/report/evidence are committed locally, findings.md appended, and full final pristine-target gate output is preserved in six numbered #154 comments. Verdict remains HOLD: two earlier P1 failures remain, no new delta finding. No push, deployment, perf VM or issue closure.

kayg commented 2026-10-12 10:04:34 +00:00

Author

Owner

Copy link

Orchestrator decision on the D244 delta review (review-audit-ca-update-d244 @ aa7a1071, HOLD): the HOLD rests only on UP-01/UP-03 (and UP-02/RV-CA-01 P2), which are pre-existing in production and deliberately deferred to release-pipeline round 4 (implemented, under review). The D244 delta itself has no new findings and the static key-memory checks pass. CA custody therefore ships with the next binary deploy; UP-01..03 ship with release-pipeline round 4 after its review.

Orchestrator decision on the D244 delta review (review-audit-ca-update-d244 @ aa7a1071, HOLD): the HOLD rests only on UP-01/UP-03 (and UP-02/RV-CA-01 P2), which are pre-existing in production and deliberately deferred to release-pipeline round 4 (implemented, under review). The D244 delta itself has no new findings and the static key-memory checks pass. CA custody therefore ships with the next binary deploy; UP-01..03 ship with release-pipeline round 4 after its review.

kayg referenced this issue 2026-10-12 12:08:28 +00:00

Add-host bootstrap fails on a NetBird-SSH-only host; failure step not logged #169

kayg commented 2026-10-12 12:08:28 +00:00

Author

Owner

Copy link

Orchestrator: DEPLOYED to production at 12:08 UTC (17:38 IST): release-prod-5 @ 5bf3f42e = live 4d1b1950 + add-host rounds 2-3 (#169, reviewed MERGE) + start fresh (server + screen; review SF-1 fixed in 5bf3f42e) + CA key memory on static builds (#154, D244). sha256 prefixes x86 2f2b4a5a / arm 7cc6e2cd match on host; healthz 200, public 200, 0 errors in journal; VmLck 1024 kB (CA key memory locked under the 8 MiB limit). Restart re-locked the CA: owner unlock needed. Owner test: add infraternal-dev (leftovers untouched) -> expect "This host has leftovers from an earlier setup" -> Start fresh.

Orchestrator: DEPLOYED to production at 12:08 UTC (17:38 IST): release-prod-5 @ 5bf3f42e = live 4d1b1950 + add-host rounds 2-3 (#169, reviewed MERGE) + start fresh (server + screen; review SF-1 fixed in 5bf3f42e) + CA key memory on static builds (#154, D244). sha256 prefixes x86 2f2b4a5a / arm 7cc6e2cd match on host; healthz 200, public 200, 0 errors in journal; VmLck 1024 kB (CA key memory locked under the 8 MiB limit). Restart re-locked the CA: owner unlock needed. Owner test: add infraternal-dev (leftovers untouched) -> expect "This host has leftovers from an earlier setup" -> Start fresh.

kayg referenced this issue 2026-10-12 12:14:36 +00:00

D250 deploy pipeline #188

kayg referenced this issue 2026-10-12 12:16:27 +00:00

D250 deploy pipeline #188

kayg referenced this issue 2026-10-13 23:09:30 +00:00

D251 edge auto-update #211

kayg referenced this issue 2026-10-13 23:09:44 +00:00

D251 edge auto-update #211

kayg referenced this issue 2026-10-28 17:53:56 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue 2026-10-28 17:54:38 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

j470b-server-mesh-rejoin

mesh-compat-382

j444b-d381-key-wins-flood

j461b-macos-utun-reader-thread

j475b-remove-host-motion

fix-reconnect-new-link

j481-d380

dev

j479-mesh-soak

fix/j476-host-facts

j475-motion-pill-split

j470-mac-node-join

root-upgrade-d376

j474-review-merge

latency-targets-120hz

nightly-suite-shards

gotatun-pin-j469

macos-utun-reader-thread

fix-flood-echo-stall

wip/j416

motion-fast-ease-out

mesh-addhost-j259

takeover-close-terminals-d368

kbd-instant-followups

fix-trust-key-double-click

nightly-suite-partial-report

appwin-icons-j207

rusqlite-slice1

swipe-content-first-d374

mesh-mtu-381

addhost-instant-open

glass-contrast-d365-mock

glass-contrast-d365

signout-followups-442

fix-startup-toast-red

research-gotatun-matrix-j317

themes-sync-j304

fix-load-flakes

fix-nix-zig-patch

fix-compute01-browser-baseline

ratchet-size-baseline-419

predict-auto-d130

revoke-coverage-d367

nightly-suite-queue-timeout

nightly-browser-suite

fix-rustsec-2026-0459

fonts-ioskeley-obel

log-retention-d375

fix-kbd-no-anim-427

fix-dev-red-specs-2

takeover-proof-305-j205

wip/j410-server-pump

ui-consistency-d372

fix-osc52-clipboard

libghostty-vt-1.0

forget-retired-host-d369

j404-merge-426

fix-setup-lock-race

fix-touch-select-426

revoke-access-report-ui

fix-predictive-echo-specs

fix-selinux-agent-exec

wip/j395-checkpoint2

wip/j395

j391-review-scratch

ui-consistency-j195-deferred-rebased

fix-rustc-paths-421

decisions-wording-341

fix-install-suite-red

fix-dev-rtt-specs

fix-pending-removal-align

fix-privileged-skip

fix-install-suite-404

review-j368

mesh-dns-j254

revoke-access-report-d356b

revoke-privilege-round5

fix-removal-confirm

review-j360

gotatun-rotation-367

deps-refresh-340

review-j354

review-J351

review-j350

addhost-takeover-d359

revoke-report-items-347

revoke-end-sessions-d362

review-j348

size-mesh-ssh-346

size-trim-337

revoke-access-diff-d356

j259-pre-rebase-b06c5a6

j305-ended-at-start-spec

addhost-sudo-consent

fix-layout-real-specs-411

fix-shell-open-411

fix-console-hosts-373

fix-shell-exit

fuzz-host-name-353

fix-host-details-410

macos-filter-j197

research-gotatun-tricks

revoke-p3-j216l

stale-state-pill

revoke-followups-j216k

revoke-progress-j216e

backup/macos01-20261106/lume/j197

backup/macos01-20261106/lume/appwin-icons-j207-stash0

backup/macos01-20261106/claude/stash-0

backup/macos01-20261106/claude/stash-1

backup/macos01-20261106/claude/J80-macos-s1

backup/macos01-20261106/claude/J80

backup/macos01-20261106/claude/J80-slice1-20261102

backup/macos01-20261106/claude/J16b-appwin-on-dev

backup/macos01-20261106/claude/appwin-launch-idle-146

backup/macos01-20261106/claude/J80-s1-run

wip/j259

trust-285-p3c

runtime-lock-j216f

mesh-ssh-p3-j175

tun-proof-p3b

trust-285-p3

terminal-polish-j271

tun-proof-p3

ssh-install-flakes-j216i

fuzz-fixes-j264

trust-285-a

trust-285-b

restart-oversized-fixture-j198

backup/macos01-20261106/lume/appwin-icons-j207

restart-bound-j216h

up-preflight-p3-j198

backup/macos01-20261106/lume/j251

up-preflight-j198

wip/up-preflight-j198-j245-p2

wip/up-preflight-j198-j245-p1

agent-fsync-offloop-j196

wip/up-preflight-j198-j245

settings-offscreen-j231

wip/up-preflight-j198-j226-inspection

wip/j103f

themes-j206

wip/up-preflight-j198-j226

flakes-j216c

backup/macos01-20261106/claude/j197

flakes-j216b

backup/macos01-20261106/claude/j197-red

wip/up-preflight-j198-review

flakes-j216

backup/macos01-20261106/claude/appwin-icons-j207

engineering-j208b

appwin-mock-j209

toast-stack-j165

engineering-j208

decisions-d351

decisions-d350

decisions-d349

appearance-presets-mock-j129

decisions-d348

docs-audit-spec

doc-coverage-baseline-raise

decisions-d347

decisions-d346b

decisions-d346

j88h-profile

ui-consistency-j195-deferred

ui-consistency-j195

engineering-practices-j194

preferred-login-ui-j166

signin-pools-263-j174

macos-node-265-s1

decisions-d345

decisions-d344

proxy-cgroup-j164

verify-quick-fuzz-329

proxy-start-io-j168

timing-flakes-j163

up-263-s1

mcp-events-j147

verify-quick-fuzz-j158

proxy-p3-j159

agent-resource-j157-detect

wip/j103d-final

remote-cancel-hang-j155

proxy-traefik-281-j62d

j149-verify-quick

proxy-traefik-281-j62b

j150-drop-unnamed

wip/j79d-red-r4

wip/j103d-d332

rootless-toast-j142

wip/j103d-head

wip/j103d

j125c-mcp

macos-build-j136

backup/macos01-20261106/claude/j136

wip/j79d-red-cli

wip/j79d-red-server

j121-link-liveness

j118c-tracer-failures

wip/j79c-head

release-desktop-j131

j124c-signed-macos

wip/j79c-red-p3

wip/j79c-red-p23

wip/j79c-red-p22

merge-j128-check

perf-deferred-j128

sidebar-toggle-260

j127-shortcut-changed-dot

j125-mcp

j118-tracer-failures

j126-account-summary

settings-sections-mock-j92

j120-pinch-lock

sidebar-292

backup/macos01-20261106/claude/j120

taste-2026-11-03

row-actions-242-215

backup/macos01-20261106/claude/stash-0-untracked

backup/macos01-20261106/claude/J80-265-s1-run

backup/macos01-20261106/claude/J80-macos-s1-20261102

j112-canvas-commands

ui-no-overshoot-scroll

fix-recovery-restart

backup/macos01-20261106/claude/stash-1-untracked

taste-2026-11-02

size-baseline-ratchet

machine-cards-structure-j108

j109-boot-copy-mockups

fix-dev-red

wip/up-263-s1

j95b-settings-rows

proxy-traefik-281

j95-option-rows

docs-human-j91

docs-keys-palette

fix-flood-1013-270-j38d

mesh-ssh-s1

mesh-ssh-s0

addhost-d291-tunnel

test-stability-load

mesh-relay-220

repro-296

shim-thp-off-24

mesh-pins-258-v2

mesh-dns

signin-d311-merged

docs-pages

ui-size-283

fix-ui-batch-specs

wip/j12b-edge-update

gate-on-arm

fix-rename-sync-293

trust-285-j60b

fix-focus-ring-clip

integ-ui-1101

edge-update-v2

signin-d311

taste-2026-11-01

layout-per-tab-250

ui-approved-splitopt-224

ui-approved-splitopt-224-on-dev

icon-text-centre-282

ui-approved-189-212-216

research-reverse-proxy

transfer-budget-320

review-mesh-pins-258-r2

sidebar-pill-259

review-mesh-relay-220

wip/j12-edge-update-v2

nix-package

status-crash-loop-237

fix-dev-test-failures

fix-fixture-socket-path

wip/mesh-relay-220-pre-dev-advance-rebase

fix-canvas-side-clip

research-head-to-head

frosted-real-256

review-mesh-pins-258

wip/mesh-relay-220-pre-final-rebase

review-layout-per-tab-250-r2

broad-suite-triage

nix-devshell

review-status-crash-loop-237-r3

wip/nix-devshell-pre-p3

taste-frosted-real

wip/code-serve-demo-2026-10-30

wip/code-serve-glass-2026-10-30

wip/code-serve-clusters-2026-10-30

wip/code-merge-release94-dev-2026-10-30

wip/rproxy-delta-scratch-2026-10-30

wip/stale-note-257-staged-2026-10-30

wip/d241-size-staged-2026-10-30

review-broad-suite-207

wip/mesh-pins-258-pre-split

wip/mesh-relay-220-pre-rebase

mesh-measure-220

plan-211-update

review-edge-autoupdate-r3

perf24-reconnect

review-stale-note-r2

release-prod-live

d241-shell-marker

review-mesh-pins-server-258

review-revocation-r3

review-setup-token-r2

review-sync-journal-r3

wip/review-mesh-pins-258-prune-review-1995fee46

frosted-scroll-256

sync-journal-r3

revocation-per-account-wip

review-tokio-asyncfd-0386

review-sync-p3s

wip/stash-8by64-stash0-2026-10-30

mesh-drag-r2

setup-token-data-wip

release-9-4

auth-busy-1013

mesh-view-overlap

sync-p3s

review-auth-busy-wake

review-readd-r8-wip

mesh-drag-bounds

audit-auth-93

app-windows-stream-start

review-authority-cap-r3

app-windows-r7-measure

readd-minimal-r6

readd-minimal-r5

app-windows-r7-soak

readd-minimal-r4

app-windows-r7

app-windows-r6

readd-minimal-r3

readd-minimal-r2

readd-minimal

merge-release8-dev

review-busy-page-liveness-r2

review-busy-page-liveness

mesh-view-trim

review-authority-read-retry-r2

review-remove-uninstall-r2

release-retry-reattach

release-retry

review-remove-uninstall

review-authority-read-retry

app-windows-ship

mesh-autoswitch-p2

mesh-ssh

mesh-relay

mesh-macos-node

screen-and-control

session-labels

review-real-logins-r5

review-real-logins-r4

review-real-logins-r3

shim-memory-r2

review-real-logins-r2

shim-memory

shadow-addhost-instant

shadow-real-logins

shadow-same-session-flood

shadow-prod-perf-fix

hosts-from-server

app-windows-real

app-windows-transport

release-prod-6w

mesh-policy-verify

quiet-close-toast

dev-merge-r4

review-mesh-agent-transport

review-app-windows-transport

settings-roundtrip

review-release-pipeline-r4

mesh-agent-transport

ended-strip-fix

review-audit-ca-update-d244

settings-rows

phone-width

signout-clear

fix-restart-tests

dev-merge-rp

signer-hardening

review-audit-ca-update

terminal-fidelity

review-audit-ca-update-wip

mesh-integrate

review-mesh-agent-transport-515d3712

review-mesh-dataplane-feec1988

mesh-dataplane

signout

research-canvas-node

wip/review-renderer-cost

wip/review-terminal-fidelity

padlock-glyph

review-release-pipeline-2e95b689

phone-polish

sidebar-polish

inbox-generic

review-mesh-dataplane-378d4055

prod-batch

ui-inbox

ui-ca-unlock

ui-machine-sections

review-mesh-dataplane-a5f744fb

tls-session-prod

session-bounds-prod

fix-dead-session

session-bounds

tls-session

palette-polish

shortcuts-d222

research-appmeta

phone-gutter

ui-centre-button

wip/ui-centre-button

wip/tls-session

review-addhost-breakit

ui-platform

renderer-cost

remote-agents

mesh-api

ssh-bootstrap

prod-hotfix2

prod-fixes

review-remote-agents

review-mesh-dataplane

session-life

research-browser

review-mesh-api

research-capture

review-mesh-api-round3

review-mesh-api-round1

gate-stability

review-gate-stability

review-relay-direct

review-mesh-api-findings

proto-sessions

font-picker

proto-addhost

proto-windows

mesh-core

latency-gate

research-bsd

research-discovery

keytray-mods

mock-core

ui-tweaks

fix-motion-sel

fix-motion

integrate2

fix-robust

t-web

t-server

vt-ghostty

fix-snap-echo

t-web-auth

review-vt2

t-agent

lane-protocol

lane-shim

lane-auth

s1-base

s1-contracts

s1-workspace

No results found.

Labels

Clear labels   

launch-qa

Findings from launch QA.

No labels

launch-qa

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

kayg/infraternal#154

No description provided.